version

支持括彩云部署

.example.env

@@ -2,7 +2,6 @@ APP_DEBUG = false
 
 [APP]
 DEFAULT_TIMEZONE = Asia/Shanghai
-SYS_KEY = {syskey}
 
 [DATABASE]
 TYPE = mysql

README.md

@@ -1,20 +1,14 @@
 ## 聚合DNS管理系统
 
-聚合DNS管理系统可以实现在一个网站内管理多个平台的域名解析，目前已支持的域名平台有：
-
-- 阿里云
-- 腾讯云
-- 华为云
-- 西部数码
-- DNSLA
-- CloudFlare
+聚合DNS管理系统可以实现在一个网站内管理多个平台的域名解析，目前已支持的域名平台有：阿里云、腾讯云、华为云、百度云、西部数码、火山引擎、DNSLA、CloudFlare、Namesilo
 
 ### 功能特性
 
 - 多用户管理，可为每个用户可分配不同的域名解析权限
 - 提供API接口，可获取域名单独的登录链接，方便各种IDC系统对接
-- 容灾切换功能，支持ping、tcp、http(s)检测协议并自动暂停/修改域名解析，并支持邮件、微信公众号通知
+- 容灾切换功能，支持ping、tcp、http(s)检测协议并自动暂停/修改域名解析，并支持邮件、微信公众号、TG群机器人通知
 - CF优选IP功能，支持获取最新的Cloudflare优选IP，并自动更新到解析记录
+- SSL证书申请与自动部署功能，支持从Let's Encrypt等渠道申请SSL证书，并自动部署到各种面板、云服务商、服务器等
 
 ### 演示截图
 
@@ -38,6 +32,18 @@ CF优选IP功能，添加优选IP任务
 
 ![](https://p1.meituan.net/csc/da70c76753aee4bce044d16fadd56e5f217660.png)
 
+SSL证书申请功能
+
+![](https://blog.cccyun.cn/content/uploadfile/202412/QQ%E6%88%AA%E5%9B%BE20241221154857.png)
+
+![](https://blog.cccyun.cn/content/uploadfile/202412/QQ%E6%88%AA%E5%9B%BE20241221154652.png?a)
+
+SSL证书自动部署功能
+
+![](https://blog.cccyun.cn/content/uploadfile/202412/QQ%E6%88%AA%E5%9B%BE20241221154702.png)
+
+![](https://blog.cccyun.cn/content/uploadfile/202412/QQ%E6%88%AA%E5%9B%BE20241221154804.png)
+
 ### 部署方法
 
 * 从[Release](https://github.com/netcccyun/dnsmgr/releases)页面下载安装包
@@ -83,9 +89,84 @@ location / {
 </IfModule>
 ```
 
-### 版权信息
+### Docker部署方法
 
-版权所有Copyright © 2023~2024 by 消失的彩虹海(https://blog.cccyun.cn)
+首先需要安装Docker，然后执行以下命令拉取镜像并启动（启动后监听8081端口）：
+
+```
+docker run --name dnsmgr -dit -p 8081:80 -v /var/dnsmgr:/app/www netcccyun/dnsmgr
+```
+
+访问并安装好后如果容灾切换未自动启动，重启容器即可：
+
+```
+docker restart dnsmgr
+```
+
+### docker-compose部署方法
+
+```
+version: '3'
+services:
+  dnsmgr-web:
+    container_name: dnsmgr-web
+    stdin_open: true
+    tty: true
+    ports:
+      - 8081:80
+    volumes:
+      - /volume1/docker/dnsmgr/web:/app/www
+    image: netcccyun/dnsmgr
+    depends_on:
+      - dnsmgr-mysql
+    networks:
+      - dnsmgr-network
+
+  dnsmgr-mysql:
+    container_name: dnsmgr-mysql
+    restart: always
+    ports:
+      - 3306:3306
+    volumes:
+      - ./mysql/conf/my.cnf:/etc/mysql/my.cnf
+      - ./mysql/logs:/logs
+      - ./mysql/data:/var/lib/mysql
+    environment:
+      - MYSQL_ROOT_PASSWORD=123456
+      - TZ=Asia/Shanghai
+    image: mysql:5.7
+    networks:
+      - dnsmgr-network
+
+networks:
+  dnsmgr-network:
+    driver: bridge
+```
+
+在运行之前请创建好目录
+```
+mkdir -p ./web
+mkdir -p ./mysql/conf
+mkdir -p ./mysql/logs
+mkdir -p ./mysql/data
+
+vim mysql/conf/my.cnf
+[mysqld]
+sql_mode=STRICT_TRANS_TABLES,NO_ZERO_IN_DATE,NO_ZERO_DATE,ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION
+```
+
+登陆mysql容器创建数据库
+```
+docker exec -it dnsmgr-mysql /bin/bash
+mysql -uroot -p123456
+create database dnsmgr;
+```
+
+在install界面链接IP填写dnsmgr-mysql
+
+### 作者信息
+
+消失的彩虹海(https://blog.cccyun.cn)
 
 ### 其他推荐
 

app/BaseController.php

@@ -102,15 +102,17 @@ abstract class BaseController
         if ($url) {
             $url = (strpos($url, '://') || 0 === strpos($url, '/')) ? $url : (string)$this->app->route->buildUrl($url);
         }
-        if(empty($msg)) $msg = '未知错误';
+        if (empty($msg)) {
+            $msg = '未知错误';
+        }
 
-        if (request()->isApi) {
-            return json(['code'=>$code=='success'?0:-1, 'msg'=>$msg]);
+        if ($this->request->isApi) {
+            return json(['code' => $code == 'success' ? 0 : -1, 'msg' => $msg]);
         }
-        if (request()->isAjax()) {
-            return json(['code'=>$code=='success'?0:-1, 'msg'=>$msg, 'url'=>$url]);
+        if ($this->request->isAjax()) {
+            return json(['code' => $code == 'success' ? 0 : -1, 'msg' => $msg, 'url' => $url]);
         }
-        
+
         View::assign([
             'code' => $code,
             'msg' => $msg,

app/command/Certtask.php

@@ -0,0 +1,33 @@
+<?php
+
+declare(strict_types=1);
+
+namespace app\command;
+
+use Exception;
+use think\console\Command;
+use think\console\Input;
+use think\console\input\Argument;
+use think\console\input\Option;
+use think\console\Output;
+use think\facade\Db;
+use think\facade\Config;
+use app\service\CertTaskService;
+
+class Certtask extends Command
+{
+    protected function configure()
+    {
+        // 指令配置
+        $this->setName('certtask')
+            ->setDescription('证书申请与部署任务');
+    }
+
+    protected function execute(Input $input, Output $output)
+    {
+        $res = Db::name('config')->cache('configs', 0)->column('value', 'key');
+        Config::set($res, 'sys');
+
+        (new CertTaskService())->execute();
+    }
+}

app/command/Dmtask.php

@@ -1,5 +1,6 @@
 <?php
-declare (strict_types = 1);
+
+declare(strict_types=1);
 
 namespace app\command;
 
@@ -10,7 +11,8 @@ use think\console\input\Argument;
 use think\console\input\Option;
 use think\console\Output;
 use think\facade\Db;
-use app\lib\TaskRunner;
+use think\facade\Config;
+use app\service\TaskRunner;
 
 class Dmtask extends Command
 {
@@ -23,42 +25,46 @@ class Dmtask extends Command
 
     protected function execute(Input $input, Output $output)
     {
+        $res = Db::name('config')->cache('configs', 0)->column('value', 'key');
+        Config::set($res, 'sys');
+
         config_set('run_error', '');
-        if(!extension_loaded('swoole')){
+        if (!extension_loaded('swoole')) {
             $output->writeln('[Error] 未安装Swoole扩展');
             config_set('run_error', '未安装Swoole扩展');
             return;
         }
-        try{
+        try {
             $output->writeln('进程启动成功.');
             $this->runtask();
-        }catch(Exception $e){
-            $output->writeln('[Error] '.$e->getMessage());
+        } catch (Exception $e) {
+            $output->writeln('[Error] ' . $e->getMessage());
             config_set('run_error', $e->getMessage());
         }
     }
 
-    private function runtask(){
-        \Co::set(['hook_flags'=> SWOOLE_HOOK_ALL]);
-        \Co\run(function() {
+    private function runtask()
+    {
+        \Co::set(['hook_flags' => SWOOLE_HOOK_ALL]);
+        \Co\run(function () {
             $date = date("Ymd");
             $count = config_get('run_count', null, true) ?? 0;
-            while(true){
+            while (true) {
                 sleep(1);
-                if($date != date("Ymd")){
+                if ($date != date("Ymd")) {
                     $count = 0;
                     $date = date("Ymd");
                 }
 
                 $rows = Db::name('dmtask')->where('checknexttime', '<=', time())->where('active', 1)->order('id', 'ASC')->select();
-                foreach($rows as $row){
-                    \go(function () use($row) {
-                        try{
+                foreach ($rows as $row) {
+                    \go(function () use ($row) {
+                        try {
                             (new TaskRunner())->execute($row);
                         } catch (\Swoole\ExitException $e) {
-                            echo $e->getStatus()."\n";
+                            echo $e->getStatus() . "\n";
                         } catch (Exception $e) {
-                            echo $e->__toString()."\n";
+                            echo $e->__toString() . "\n";
                         }
                     });
                     Db::name('dmtask')->where('id', $row['id'])->update([

app/command/Opiptask.php

@@ -1,5 +1,6 @@
 <?php
-declare (strict_types = 1);
+
+declare(strict_types=1);
 
 namespace app\command;
 
@@ -10,7 +11,8 @@ use think\console\input\Argument;
 use think\console\input\Option;
 use think\console\Output;
 use think\facade\Db;
-use app\lib\OptimizeService;
+use think\facade\Config;
+use app\service\OptimizeService;
 
 class Opiptask extends Command
 {
@@ -23,6 +25,9 @@ class Opiptask extends Command
 
     protected function execute(Input $input, Output $output)
     {
+        $res = Db::name('config')->cache('configs', 0)->column('value', 'key');
+        Config::set($res, 'sys');
+
         (new OptimizeService())->execute();
     }
 }

app/command/Reset.php

@@ -0,0 +1,47 @@
+<?php
+
+declare(strict_types=1);
+
+namespace app\command;
+
+use Exception;
+use think\console\Command;
+use think\console\Input;
+use think\console\input\Argument;
+use think\console\input\Option;
+use think\console\Output;
+use think\facade\Db;
+use think\facade\Config;
+
+class Reset extends Command
+{
+    protected function configure()
+    {
+        // 指令配置
+        $this->setName('reset')
+            ->addArgument('type', Argument::REQUIRED, '操作类型,pwd:重置密码,totp:关闭TOTP')
+            ->addArgument('username', Argument::REQUIRED, '用户名')
+            ->addArgument('password', Argument::OPTIONAL, '密码')
+            ->setDescription('重置密码');
+    }
+
+    protected function execute(Input $input, Output $output)
+    {
+        $type = trim($input->getArgument('type'));
+        $username = trim($input->getArgument('username'));
+        $user = Db::name('user')->where('username', $username)->find();
+        if (!$user) {
+            $output->writeln('用户 ' . $username . ' 不存在');
+            return;
+        }
+        if ($type == 'pwd') {
+            $password = $input->getArgument('password');
+            if (empty($password)) $password = '123456';
+            Db::name('user')->where('id', $user['id'])->update(['password' => password_hash($password, PASSWORD_DEFAULT)]);
+            $output->writeln('用户 ' . $username . ' 密码重置成功');
+        } elseif ($type == 'totp') {
+            Db::name('user')->where('id', $user['id'])->update(['totp_open' => 0, 'totp_secret' => null]);
+            $output->writeln('用户 ' . $username . ' TOTP关闭成功');
+        }
+    }
+}

app/common.php

@@ -1,228 +1,260 @@
 <?php
 // 应用公共文件
 use think\facade\Db;
+use think\facade\Request;
 
-function get_curl($url, $post=0, $referer=0, $cookie=0, $header=0, $ua=0, $nobody=0, $addheader=0)
+function get_curl($url, $post = 0, $referer = 0, $cookie = 0, $header = 0, $ua = 0, $nobody = 0, $addheader = 0)
 {
-	$ch = curl_init();
-	curl_setopt($ch, CURLOPT_URL, $url);
-	curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
-	curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
-	$httpheader[] = "Accept: */*";
-	$httpheader[] = "Accept-Encoding: gzip,deflate,sdch";
-	$httpheader[] = "Accept-Language: zh-CN,zh;q=0.8";
-	$httpheader[] = "Connection: close";
-	if($addheader){
-		$httpheader = array_merge($httpheader, $addheader);
-	}
-	curl_setopt($ch, CURLOPT_HTTPHEADER, $httpheader);
-	if ($post) {
-		curl_setopt($ch, CURLOPT_POST, 1);
-		curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
-	}
-	if ($header) {
-		curl_setopt($ch, CURLOPT_HEADER, true);
-	}
-	if ($cookie) {
-		curl_setopt($ch, CURLOPT_COOKIE, $cookie);
-	}
-	if($referer){
-		curl_setopt($ch, CURLOPT_REFERER, $referer);
-	}
-	if ($ua) {
-		curl_setopt($ch, CURLOPT_USERAGENT, $ua);
-	}
-	else {
-		curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Linux; U; Android 4.0.4; es-mx; HTC_One_X Build/IMM76D) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0");
-	}
-	if ($nobody) {
-		curl_setopt($ch, CURLOPT_NOBODY, 1);
-	}
-	curl_setopt($ch, CURLOPT_ENCODING, "gzip");
-	curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
-	$ret = curl_exec($ch);
-	curl_close($ch);
-	return $ret;
+    $ch = curl_init();
+    curl_setopt($ch, CURLOPT_URL, $url);
+    curl_setopt($ch, CURLOPT_TIMEOUT, 10);
+    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+    $httpheader[] = "Accept: */*";
+    $httpheader[] = "Accept-Encoding: gzip,deflate,sdch";
+    $httpheader[] = "Accept-Language: zh-CN,zh;q=0.8";
+    $httpheader[] = "Connection: close";
+    if ($addheader) {
+        $httpheader = array_merge($httpheader, $addheader);
+    }
+    curl_setopt($ch, CURLOPT_HTTPHEADER, $httpheader);
+    if ($post) {
+        curl_setopt($ch, CURLOPT_POST, 1);
+        curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
+    }
+    if ($header) {
+        curl_setopt($ch, CURLOPT_HEADER, true);
+    }
+    if ($cookie) {
+        curl_setopt($ch, CURLOPT_COOKIE, $cookie);
+    }
+    if ($referer) {
+        curl_setopt($ch, CURLOPT_REFERER, $referer);
+    }
+    if ($ua) {
+        curl_setopt($ch, CURLOPT_USERAGENT, $ua);
+    } else {
+        curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Linux; U; Android 4.0.4; es-mx; HTC_One_X Build/IMM76D) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0");
+    }
+    if ($nobody) {
+        curl_setopt($ch, CURLOPT_NOBODY, 1);
+    }
+    curl_setopt($ch, CURLOPT_ENCODING, "gzip");
+    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
+    $ret = curl_exec($ch);
+    curl_close($ch);
+    return $ret;
 }
 
-function real_ip($type=0){
+function real_ip($type = 0)
+{
     $ip = $_SERVER['REMOTE_ADDR'];
-    if($type<=0 && isset($_SERVER['HTTP_X_FORWARDED_FOR']) && preg_match_all('#\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}#s', $_SERVER['HTTP_X_FORWARDED_FOR'], $matches)) {
-        foreach ($matches[0] AS $xip) {
+    if ($type <= 0 && isset($_SERVER['HTTP_X_FORWARDED_FOR']) && preg_match_all('#\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}#s', $_SERVER['HTTP_X_FORWARDED_FOR'], $matches)) {
+        foreach ($matches[0] as $xip) {
             if (filter_var($xip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4 | FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE)) {
                 $ip = $xip;
                 break;
             }
         }
-    } elseif ($type<=0 && isset($_SERVER['HTTP_CLIENT_IP']) && filter_var($_SERVER['HTTP_CLIENT_IP'], FILTER_VALIDATE_IP, FILTER_FLAG_IPV4 | FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE)) {
+    } elseif ($type <= 0 && isset($_SERVER['HTTP_CLIENT_IP']) && filter_var($_SERVER['HTTP_CLIENT_IP'], FILTER_VALIDATE_IP, FILTER_FLAG_IPV4 | FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE)) {
         $ip = $_SERVER['HTTP_CLIENT_IP'];
-    } elseif ($type<=1 && isset($_SERVER['HTTP_CF_CONNECTING_IP']) && filter_var($_SERVER['HTTP_CF_CONNECTING_IP'], FILTER_VALIDATE_IP, FILTER_FLAG_IPV4 | FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE)) {
+    } elseif ($type <= 1 && isset($_SERVER['HTTP_CF_CONNECTING_IP']) && filter_var($_SERVER['HTTP_CF_CONNECTING_IP'], FILTER_VALIDATE_IP, FILTER_FLAG_IPV4 | FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE)) {
         $ip = $_SERVER['HTTP_CF_CONNECTING_IP'];
-    } elseif ($type<=1 && isset($_SERVER['HTTP_X_REAL_IP']) && filter_var($_SERVER['HTTP_X_REAL_IP'], FILTER_VALIDATE_IP, FILTER_FLAG_IPV4 | FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE)) {
+    } elseif ($type <= 1 && isset($_SERVER['HTTP_X_REAL_IP']) && filter_var($_SERVER['HTTP_X_REAL_IP'], FILTER_VALIDATE_IP, FILTER_FLAG_IPV4 | FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE)) {
         $ip = $_SERVER['HTTP_X_REAL_IP'];
     }
     return $ip;
 }
 
-function strexists($string, $find) {
-	return !(strpos($string, $find) === FALSE);
+function strexists($string, $find)
+{
+    return !(strpos($string, $find) === FALSE);
 }
 
-function dstrpos($string, $arr) {
-	if(empty($string)) return false;
-	foreach((array)$arr as $v) {
-		if(strpos($string, $v) !== false) {
-			return true;
-		}
-	}
-	return false;
+function dstrpos($string, $arr)
+{
+    if (empty($string)) return false;
+    foreach ((array)$arr as $v) {
+        if (strpos($string, $v) !== false) {
+            return true;
+        }
+    }
+    return false;
 }
 
-function checkmobile() {
-	$useragent = strtolower($_SERVER['HTTP_USER_AGENT']);
-	$ualist = array('android', 'midp', 'nokia', 'mobile', 'iphone', 'ipod', 'blackberry', 'windows phone');
-	if((dstrpos($useragent, $ualist) || strexists($_SERVER['HTTP_ACCEPT'], "VND.WAP") || strexists($_SERVER['HTTP_VIA'],"wap")))
-		return true;
-	else
-		return false;
+function checkmobile()
+{
+    $useragent = strtolower($_SERVER['HTTP_USER_AGENT']);
+    $ualist = array('android', 'midp', 'nokia', 'mobile', 'iphone', 'ipod', 'blackberry', 'windows phone');
+    if ((dstrpos($useragent, $ualist) || strexists($_SERVER['HTTP_ACCEPT'], "VND.WAP") || strexists($_SERVER['HTTP_VIA'], "wap"))) {
+        return true;
+    } else {
+        return false;
+    }
 }
 
-function authcode($string, $operation = 'DECODE', $key = '', $expiry = 0) {
-	$ckey_length = 4;
-	$key = md5($key);
-	$keya = md5(substr($key, 0, 16));
-	$keyb = md5(substr($key, 16, 16));
-	$keyc = $ckey_length ? ($operation == 'DECODE' ? substr($string, 0, $ckey_length): substr(md5(microtime()), -$ckey_length)) : '';
-	$cryptkey = $keya.md5($keya.$keyc);
-	$key_length = strlen($cryptkey);
-	$string = $operation == 'DECODE' ? base64_decode(substr($string, $ckey_length)) : sprintf('%010d', $expiry ? $expiry + time() : 0).substr(md5($string.$keyb), 0, 16).$string;
-	$string_length = strlen($string);
-	$result = '';
-	$box = range(0, 255);
-	$rndkey = array();
-	for($i = 0; $i <= 255; $i++) {
-		$rndkey[$i] = ord($cryptkey[$i % $key_length]);
-	}
-	for($j = $i = 0; $i < 256; $i++) {
-		$j = ($j + $box[$i] + $rndkey[$i]) % 256;
-		$tmp = $box[$i];
-		$box[$i] = $box[$j];
-		$box[$j] = $tmp;
-	}
-	for($a = $j = $i = 0; $i < $string_length; $i++) {
-		$a = ($a + 1) % 256;
-		$j = ($j + $box[$a]) % 256;
-		$tmp = $box[$a];
-		$box[$a] = $box[$j];
-		$box[$j] = $tmp;
-		$result .= chr(ord($string[$i]) ^ ($box[($box[$a] + $box[$j]) % 256]));
-	}
-	if($operation == 'DECODE') {
-		if(((int)substr($result, 0, 10) == 0 || (int)substr($result, 0, 10) - time() > 0) && substr($result, 10, 16) == substr(md5(substr($result, 26).$keyb), 0, 16)) {
-			return substr($result, 26);
-		} else {
-			return '';
-		}
-	} else {
-		return $keyc.base64_encode($result);
-	}
+function authcode($string, $operation = 'DECODE', $key = '', $expiry = 0)
+{
+    $ckey_length = 4;
+    $key = md5($key);
+    $keya = md5(substr($key, 0, 16));
+    $keyb = md5(substr($key, 16, 16));
+    $keyc = $ckey_length ? ($operation == 'DECODE' ? substr($string, 0, $ckey_length) : substr(md5(microtime()), -$ckey_length)) : '';
+    $cryptkey = $keya.md5($keya.$keyc);
+    $key_length = strlen($cryptkey);
+    $string = $operation == 'DECODE' ? base64_decode(substr($string, $ckey_length)) : sprintf('%010d', $expiry ? $expiry + time() : 0).substr(md5($string.$keyb), 0, 16).$string;
+    $string_length = strlen($string);
+    $result = '';
+    $box = range(0, 255);
+    $rndkey = array();
+    for ($i = 0; $i <= 255; $i++) {
+        $rndkey[$i] = ord($cryptkey[$i % $key_length]);
+    }
+    for ($j = $i = 0; $i < 256; $i++) {
+        $j = ($j + $box[$i] + $rndkey[$i]) % 256;
+        $tmp = $box[$i];
+        $box[$i] = $box[$j];
+        $box[$j] = $tmp;
+    }
+    for ($a = $j = $i = 0; $i < $string_length; $i++) {
+        $a = ($a + 1) % 256;
+        $j = ($j + $box[$a]) % 256;
+        $tmp = $box[$a];
+        $box[$a] = $box[$j];
+        $box[$j] = $tmp;
+        $result .= chr(ord($string[$i]) ^ ($box[($box[$a] + $box[$j]) % 256]));
+    }
+    if ($operation == 'DECODE') {
+        if (((int)substr($result, 0, 10) == 0 || (int)substr($result, 0, 10) - time() > 0) && substr($result, 10, 16) == substr(md5(substr($result, 26).$keyb), 0, 16)) {
+            return substr($result, 26);
+        } else {
+            return '';
+        }
+    } else {
+        return $keyc.base64_encode($result);
+    }
 }
 
-function random($length, $numeric = 0) {
-	$seed = base_convert(md5(microtime().$_SERVER['DOCUMENT_ROOT']), 16, $numeric ? 10 : 35);
-	$seed = $numeric ? (str_replace('0', '', $seed).'012340567890') : ($seed.'zZ'.strtoupper($seed));
-	$hash = '';
-	$max = strlen($seed) - 1;
-	for($i = 0; $i < $length; $i++) {
-		$hash .= $seed[mt_rand(0, $max)];
-	}
-	return $hash;
+function random($length, $numeric = 0)
+{
+    $seed = base_convert(md5(microtime().$_SERVER['DOCUMENT_ROOT']), 16, $numeric ? 10 : 35);
+    $seed = $numeric ? (str_replace('0', '', $seed).'012340567890') : ($seed.'zZ'.strtoupper($seed));
+    $hash = '';
+    $max = strlen($seed) - 1;
+    for ($i = 0; $i < $length; $i++) {
+        $hash .= $seed[mt_rand(0, $max)];
+    }
+    return $hash;
 }
 
-function checkDomain($domain){
-	if(empty($domain) || !preg_match('/^[-$a-z0-9_*.]{2,512}$/i', $domain) || (stripos($domain, '.') === false) || substr($domain, -1) == '.' || substr($domain, 0 ,1) == '.' || substr($domain, 0 ,1) == '*' && substr($domain, 1 ,1) != '.' || substr_count($domain, '*')>1 || strpos($domain, '*')>0 || strlen($domain)<4) return false;
-	return true;
+function checkDomain($domain)
+{
+    if (empty($domain) || !preg_match('/^[-$a-z0-9_*.]{2,512}$/i', $domain) || (stripos($domain, '.') === false) || substr($domain, -1) == '.' || substr($domain, 0, 1) == '.' || substr($domain, 0, 1) == '*' && substr($domain, 1, 1) != '.' || substr_count($domain, '*') > 1 || strpos($domain, '*') > 0 || strlen($domain) < 4) return false;
+    return true;
 }
 
 function getSubstr($str, $leftStr, $rightStr)
 {
-	$left = strpos($str, $leftStr);
-	$start = $left+strlen($leftStr);
-	$right = strpos($str, $rightStr, $start);
-	if($left < 0) return '';
-	if($right>0){
-		return substr($str, $start, $right-$start);
-	}else{
-		return substr($str, $start);
-	}
+    $left = strpos($str, $leftStr);
+    $start = $left + strlen($leftStr);
+    $right = strpos($str, $rightStr, $start);
+    if ($left < 0) return '';
+    if ($right > 0) {
+        return substr($str, $start, $right - $start);
+    } else {
+        return substr($str, $start);
+    }
 }
 
-function checkRefererHost(){
-    if(!request()->header('referer'))return false;
-    $url_arr = parse_url(request()->header('referer'));
-    $http_host = request()->header('host');
-    if(strpos($http_host,':'))$http_host = substr($http_host, 0, strpos($http_host, ':'));
+function arrays_are_equal($array1, $array2)
+{
+    return empty(array_diff($array1, $array2)) && empty(array_diff($array2, $array1));
+}
+
+function checkRefererHost()
+{
+    if (!Request::header('referer')) {
+        return false;
+    }
+    $url_arr = parse_url(Request::header('referer'));
+    $http_host = Request::header('host');
+    if (strpos($http_host, ':')) {
+        $http_host = substr($http_host, 0, strpos($http_host, ':'));
+    }
     return $url_arr['host'] === $http_host;
 }
 
-function checkIfActive($string) {
-	$array=explode(',',$string);
-	$action = request()->action();
-	if (in_array($action,$array)){
-		return 'active';
-	}else
-		return null;
+function checkIfActive($string)
+{
+    $array = explode(',', $string);
+    $action = Request::action();
+    if (in_array($action, $array)) {
+        return 'active';
+    } else {
+        return null;
+    }
 }
 
-function getSid() {
+function getSid()
+{
     return md5(uniqid(mt_rand(), true) . microtime());
 }
-function getMd5Pwd($pwd, $salt=null) {
+function getMd5Pwd($pwd, $salt = null)
+{
     return md5(md5($pwd) . md5('1277180438'.$salt));
 }
 
-function isNullOrEmpty($str){
-	return $str === null || $str === '';
+function isNullOrEmpty($str)
+{
+    return $str === null || $str === '';
 }
 
-function checkPermission($type, $domain = null){
-	$user = request()->user;
-	if(empty($user)) return false;
-	if($user['level'] == 2) return true;
-	if($type == 1 && $user['level'] == 1 || $type == 0 && $user['level'] >= 0){
-		if($domain == null) return true;
-		if(in_array($domain, $user['permission'])){
-			return true;
-		}
-	}
-	return false;
+function checkPermission($type, $domain = null)
+{
+    $user = Request()->user;
+    if (empty($user)) {
+        return false;
+    }
+    if ($user['level'] == 2) {
+        return true;
+    }
+    if ($type == 1 && $user['level'] == 1 || $type == 0 && $user['level'] >= 0) {
+        if ($domain == null) {
+            return true;
+        }
+        if (in_array($domain, $user['permission'])) {
+            return true;
+        }
+    }
+    return false;
 }
 
-function getAdminSkin(){
-	$skin = cookie('admin_skin');
-	if(empty($skin)){
-		$skin = config_get('admin_skin');
-	}
-	if(empty($skin)){
-		$skin = 'skin-black-blue';
-	}
-	return $skin;
+function getAdminSkin()
+{
+    $skin = cookie('admin_skin');
+    if (empty($skin)) {
+        $skin = config_get('admin_skin');
+    }
+    if (empty($skin)) {
+        $skin = 'skin-black-blue';
+    }
+    return $skin;
 }
 
 function config_get($key, $default = null, $force = false)
 {
-	if ($force) {
-		$value = Db::name('config')->where('key', $key)->value('value');
-	} else {
-		$value = config('sys.'.$key);
-	}
+    if ($force) {
+        $value = Db::name('config')->where('key', $key)->value('value');
+    } else {
+        $value = config('sys.' . $key);
+    }
     return $value ?: $default;
 }
 
 function config_set($key, $value)
 {
-    $res = Db::name('config')->replace()->insert(['key'=>$key, 'value'=>$value]);
-    return $res!==false;
+    $res = Db::name('config')->replace()->insert(['key' => $key, 'value' => $value]);
+    return $res !== false;
 }
 
 function getMillisecond()
@@ -231,23 +263,212 @@ function getMillisecond()
     return (int)sprintf('%.0f', (floatval($s1) + floatval($s2)) * 1000);
 }
 
-function getDnsType($value){
-	if(filter_var($value, FILTER_VALIDATE_IP))return 'A';
-	else return 'CNAME';
+function getDnsType($value)
+{
+    if (filter_var($value, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)) {
+        return 'A';
+    } elseif (filter_var($value, FILTER_VALIDATE_IP, FILTER_FLAG_IPV6)) {
+        return 'AAAA';
+    } else {
+        return 'CNAME';
+    }
 }
 
-function convert_second($s){
-	$m = floor($s/60);
-	if($m == 0){
-		return $s.'秒';
-	}else{
-		$s = $s%60;
-		$h = floor($m/60);
-		if($h == 0){
-			return $m.'分钟'.$s.'秒';
-		}else{
-			$m = $m%60;
-			return $h.'小时'.$m.'分钟'.$s.'秒';
-		}
-	}
+function convert_second($s)
+{
+    $m = floor($s / 60);
+    if ($m == 0) {
+        return $s.'秒';
+    } else {
+        $s = $s % 60;
+        $h = floor($m / 60);
+        if ($h == 0) {
+            return $m.'分钟'.$s.'秒';
+        } else {
+            $m = $m % 60;
+            return $h.'小时'.$m.'分钟'.$s.'秒';
+        }
+    }
+}
+
+function getMainDomain($host)
+{
+    if (filter_var($host, FILTER_VALIDATE_IP)) return $host;
+    $domain_root = file_get_contents(app()->getBasePath() . 'data' . DIRECTORY_SEPARATOR . 'domain_root.txt');
+    $domain_root = explode("\r\n", $domain_root);
+    $data = explode('.', $host);
+    $co_ta = count($data);
+    if ($co_ta <= 2) return $host;
+    $domain_name = $data[$co_ta - 2] . '.' . $data[$co_ta - 1];
+    if (in_array($domain_name, $domain_root) && $co_ta > 2) {
+        $domain_name = $data[$co_ta - 3] . '.' . $domain_name;
+    }
+    return $domain_name;
+}
+
+function check_proxy($url, $proxy_server, $proxy_port, $type, $proxy_user, $proxy_pwd)
+{
+    $ch = curl_init($url);
+    if ($type == 'https') {
+        $proxy_type = CURLPROXY_HTTPS;
+    } elseif ($type == 'sock4') {
+        $proxy_type = CURLPROXY_SOCKS4;
+    } elseif ($type == 'sock5') {
+        $proxy_type = CURLPROXY_SOCKS5;
+    } else {
+        $proxy_type = CURLPROXY_HTTP;
+    }
+    curl_setopt($ch, CURLOPT_PROXYAUTH, CURLAUTH_BASIC);
+    curl_setopt($ch, CURLOPT_PROXY, $proxy_server);
+    curl_setopt($ch, CURLOPT_PROXYPORT, intval($proxy_port));
+    if (!empty($proxy_user) && !empty($proxy_pwd)) {
+        curl_setopt($ch, CURLOPT_PROXYUSERPWD, $proxy_user . ':' . $proxy_pwd);
+    }
+    curl_setopt($ch, CURLOPT_PROXYTYPE, $proxy_type);
+    $httpheader[] = "Accept: */*";
+    $httpheader[] = "Accept-Language: zh-CN,zh;q=0.8";
+    $httpheader[] = "Connection: close";
+    curl_setopt($ch, CURLOPT_HTTPHEADER, $httpheader);
+    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+    curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36');
+    curl_setopt($ch, CURLOPT_TIMEOUT, 3);
+    curl_exec($ch);
+    $errno = curl_errno($ch);
+    if ($errno) {
+        $errmsg = curl_error($ch);
+        curl_close($ch);
+        throw new Exception($errmsg);
+    }
+    $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+    curl_close($ch);
+    if ($httpCode >= 200 && $httpCode < 400) {
+        return true;
+    } else {
+        throw new Exception('HTTP状态码异常：' . $httpCode);
+    }
+}
+
+function clearDirectory($dir): bool
+{
+    // 确保路径是目录
+    if (!is_dir($dir)) {
+        return false;
+    }
+
+    // 打开目录
+    $items = scandir($dir);
+    foreach ($items as $item) {
+        // 跳过 '.' 和 '..'
+        if ($item == '.' || $item == '..') {
+            continue;
+        }
+
+        // 完整路径
+        $path = $dir . DIRECTORY_SEPARATOR . $item;
+
+        // 如果是目录，递归删除其内容
+        if (is_dir($path)) {
+            clearDirectory($path);
+            // 删除空目录
+            rmdir($path);
+        } else {
+            // 删除文件
+            unlink($path);
+        }
+    }
+    return true;
+}
+
+function curl_client($url, $data = null, $referer = null, $cookie = null, $headers = null, $proxy = false, $method = null, $timeout = 5)
+{
+    $ch = curl_init();
+    curl_setopt($ch, CURLOPT_URL, $url);
+    curl_setopt($ch, CURLOPT_TIMEOUT, $timeout);
+    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
+    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+    $httpheader[] = "Accept: */*";
+    $httpheader[] = "Accept-Language: zh-CN,zh;q=0.8";
+    $httpheader[] = "Connection: close";
+    if ($headers) {
+        $httpheader = array_merge($httpheader, $headers);
+    }
+    curl_setopt($ch, CURLOPT_HTTPHEADER, $httpheader);
+    curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.95 Safari/537.36");
+    curl_setopt($ch, CURLOPT_HEADER, true);
+    if ($data) {
+        curl_setopt($ch, CURLOPT_POST, 1);
+        curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
+    }
+    if ($cookie) {
+        curl_setopt($ch, CURLOPT_COOKIE, $cookie);
+    }
+    if ($referer) {
+        curl_setopt($ch, CURLOPT_REFERER, $referer);
+    }
+    if ($method) {
+        curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
+    }
+
+    if ($proxy) {
+        curl_set_proxy($ch);
+    }
+
+    $ret = curl_exec($ch);
+    $errno = curl_errno($ch);
+    if ($errno) {
+        curl_close($ch);
+        throw new Exception('Curl error: ' . curl_error($ch));
+    }
+    $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+    $headerSize = curl_getinfo($ch, CURLINFO_HEADER_SIZE);
+    $redirect_url = curl_getinfo($ch, CURLINFO_REDIRECT_URL);
+    curl_close($ch);
+    $header = substr($ret, 0, $headerSize);
+    $body = substr($ret, $headerSize);
+    return ['code' => $httpCode, 'redirect_url' => $redirect_url, 'header' => $header, 'body' => $body];
+}
+
+function curl_set_proxy(&$ch)
+{
+    $proxy_server = config_get('proxy_server');
+    $proxy_port = intval(config_get('proxy_port'));
+    $proxy_userpwd = config_get('proxy_user') . ':' . config_get('proxy_pwd');
+    $proxy_type = config_get('proxy_type');
+    if (empty($proxy_server) || empty($proxy_port)) {
+        return;
+    }
+    if ($proxy_type == 'https') {
+        $proxy_type = CURLPROXY_HTTPS;
+    } elseif ($proxy_type == 'sock4') {
+        $proxy_type = CURLPROXY_SOCKS4;
+    } elseif ($proxy_type == 'sock5') {
+        $proxy_type = CURLPROXY_SOCKS5;
+    } else {
+        $proxy_type = CURLPROXY_HTTP;
+    }
+    curl_setopt($ch, CURLOPT_PROXYAUTH, CURLAUTH_BASIC);
+    curl_setopt($ch, CURLOPT_PROXY, $proxy_server);
+    curl_setopt($ch, CURLOPT_PROXYPORT, $proxy_port);
+    if ($proxy_userpwd != ':') {
+        curl_setopt($ch, CURLOPT_PROXYUSERPWD, $proxy_userpwd);
+    }
+    curl_setopt($ch, CURLOPT_PROXYTYPE, $proxy_type);
+}
+
+function convertDomainToAscii($domain) {
+    if (preg_match('/[\x{4e00}-\x{9fa5}]/u', $domain)) {
+        return idn_to_ascii($domain);
+    } else {
+        return $domain;
+    }
+}
+function convertDomainToUtf8($domain) {
+    if (preg_match('/^xn--/', $domain)) {
+        return idn_to_utf8($domain);
+    } else {
+        return $domain;
+    }
 }

app/controller/Auth.php

@@ -1,61 +1,61 @@
 <?php
+
 namespace app\controller;
 
 use app\BaseController;
 use Exception;
 use think\facade\Db;
-use think\facade\View;
-use app\lib\DnsHelper;
 
 class Auth extends BaseController
 {
 
-    public function verifycode()
+    public function login()
     {
-        return captcha();
-    }
+        $login_limit_count = 5; //登录失败次数
+        $login_limit_file = app()->getRuntimePath() . '@login.lock';
 
-    public function login(){
-        $login_limit_count = 5;//登录失败次数
-        $login_limit_file = app()->getRuntimePath().'@login.lock';
-
-        if(request()->islogin){
+        if ($this->request->islogin) {
             return redirect('/');
         }
 
-        if(request()->isAjax()){
-            $username = input('post.username',null,'trim');
-            $password = input('post.password',null,'trim');
-            $code = input('post.code',null,'trim');
-    
-            if(empty($username) || empty($password)){
-                return json(['code'=>-1, 'msg'=>'用户名或密码不能为空']);
+        if ($this->request->isAjax()) {
+            $username = input('post.username', null, 'trim');
+            $password = input('post.password', null, 'trim');
+            $code = input('post.code', null, 'trim');
+
+            if (empty($username) || empty($password)) {
+                return json(['code' => -1, 'msg' => '用户名或密码不能为空']);
             }
-            if(!captcha_check($code)){
-                return json(['code'=>-1, 'msg'=>'验证码错误', 'vcode'=>1]);
+            if (!captcha_check($code)) {
+                return json(['code' => -1, 'msg' => '验证码错误', 'vcode' => 1]);
             }
             if (file_exists($login_limit_file)) {
                 $login_limit = unserialize(file_get_contents($login_limit_file));
                 if ($login_limit['count'] >= $login_limit_count && $login_limit['time'] > time() - 7200) {
-                    exit(json_encode(['code' => -1, 'msg' => '多次登录失败，暂时禁止登录。可删除/runtime/@login.lock文件解除限制', 'vcode'=>1]));
+                    return json(['code' => -1, 'msg' => '多次登录失败，暂时禁止登录。可删除/runtime/@login.lock文件解除限制', 'vcode' => 1]);
                 }
             }
             $user = Db::name('user')->where('username', $username)->find();
-            if($user && password_verify($password, $user['password'])){
-                if($user['status'] == 0) return json(['code'=>-1, 'msg'=>'此用户已被封禁', 'vcode'=>1]);
-                Db::name('log')->insert(['uid' => $user['id'], 'action' => '登录后台', 'data' => 'IP:'.$this->clientip, 'addtime' => date("Y-m-d H:i:s")]);
-                DB::name('user')->where('id', $user['id'])->update(['lasttime' => date("Y-m-d H:i:s")]);
-                $session = md5($user['id'].$user['password']);
-                $expiretime = time()+2562000;
-                $token = authcode("user\t{$user['id']}\t{$session}\t{$expiretime}", 'ENCODE', env('app.sys_key'));
-                cookie('user_token', $token, ['expire' => $expiretime, 'httponly' => true]);
+            if ($user && password_verify($password, $user['password'])) {
+                if ($user['status'] == 0) return json(['code' => -1, 'msg' => '此用户已被封禁', 'vcode' => 1]);
+                if (isset($user['totp_open']) && $user['totp_open'] == 1 && !empty($user['totp_secret'])) {
+                    session('pre_login_user', $user['id']);
+                    if (file_exists($login_limit_file)) {
+                        unlink($login_limit_file);
+                    }
+                    return json(['code' => -1, 'msg' => '需要验证动态口令', 'vcode' => 2]);
+                }
+                $this->loginUser($user);
                 if (file_exists($login_limit_file)) {
                     unlink($login_limit_file);
                 }
-                return json(['code'=>0]);
-            }else{
-                if($user){
-                    Db::name('log')->insert(['uid' => $user['id'], 'action' => '登录失败', 'data' => 'IP:'.$this->clientip, 'addtime' => date("Y-m-d H:i:s")]);
+                return json(['code' => 0]);
+            } else {
+                if ($user) {
+                    Db::name('log')->insert(['uid' => $user['id'], 'action' => '登录失败', 'data' => 'IP:' . $this->clientip, 'addtime' => date("Y-m-d H:i:s")]);
+                    if (isset($user['totp_open']) && $user['totp_open'] == 1 && !empty($user['totp_secret'])) {
+                        return json(['code' => -1, 'msg' => '用户名或密码错误', 'vcode' => 1]);
+                    }
                 }
                 if (!file_exists($login_limit_file)) {
                     $login_limit = ['count' => 0, 'time' => 0];
@@ -75,6 +75,28 @@ class Auth extends BaseController
         return view();
     }
 
+    public function totp()
+    {
+        $uid = session('pre_login_user');
+        if (empty($uid)) return json(['code' => -1, 'msg' => '请重新登录']);
+        $code = input('post.code');
+        if (empty($code)) return json(['code' => -1, 'msg' => '请输入动态口令']);
+        $user = Db::name('user')->where('id', $uid)->find();
+        if (!$user) return json(['code' => -1, 'msg' => '用户不存在']);
+        if ($user['totp_open'] == 0 || empty($user['totp_secret'])) return json(['code' => -1, 'msg' => '未开启TOTP二次验证']);
+        try {
+            $totp = \app\lib\TOTP::create($user['totp_secret']);
+            if (!$totp->verify($code)) {
+                return json(['code' => -1, 'msg' => '动态口令错误']);
+            }
+        } catch (Exception $e) {
+            return json(['code' => -1, 'msg' => $e->getMessage()]);
+        }
+        $this->loginUser($user);
+        session('pre_login_user', null);
+        return json(['code' => 0]);
+    }
+
     public function logout()
     {
         cookie('user_token', null);
@@ -83,36 +105,55 @@ class Auth extends BaseController
 
     public function quicklogin()
     {
-        $domain = input('get.domain',null,'trim');
-        $timestamp = input('get.timestamp',null,'trim');
-        $token = input('get.token',null,'trim');
-        $sign = input('get.sign',null,'trim');
-        if(empty($domain) || empty($timestamp) || empty($token) || empty($sign)){
+        $domain = input('get.domain', null, 'trim');
+        $timestamp = input('get.timestamp', null, 'trim');
+        $token = input('get.token', null, 'trim');
+        $sign = input('get.sign', null, 'trim');
+        if (empty($domain) || empty($timestamp) || empty($token) || empty($sign)) {
             return $this->alert('error', '参数错误');
         }
-        if($timestamp < time()-300 || $timestamp > time()+300){
+        if ($timestamp < time() - 300 || $timestamp > time() + 300) {
             return $this->alert('error', '时间戳无效');
         }
-        if(md5(env('app.sys_key').$domain.$timestamp.$token.env('app.sys_key')) !== $sign){
+        if (md5(config_get('sys_key') . $domain . $timestamp . $token . config_get('sys_key')) !== $sign) {
             return $this->alert('error', '签名错误');
         }
-        if($token != cache('quicklogin_'.$domain)){
+        if ($token != cache('quicklogin_' . $domain)) {
             return $this->alert('error', 'Token无效');
         }
         $row = Db::name('domain')->where('name', $domain)->find();
-        if(!$row){
+        if (!$row) {
             return $this->alert('error', '该域名不存在');
         }
-        if(!$row['is_sso']){
+        if (!$row['is_sso']) {
             return $this->alert('error', '该域名不支持快捷登录');
         }
 
-        Db::name('log')->insert(['uid' => 0, 'action' => '域名快捷登录', 'data' => 'IP:'.$this->clientip, 'addtime' => date("Y-m-d H:i:s"), 'domain' => $domain]);
+        $this->loginDomain($row);
+        return redirect('/record/' . $row['id']);
+    }
 
-        $session = md5($row['id'].$row['name']);
-        $expiretime = time()+2562000;
-        $token = authcode("domain\t{$row['id']}\t{$session}\t{$expiretime}", 'ENCODE', env('app.sys_key'));
+    private function loginUser($user)
+    {
+        Db::name('log')->insert(['uid' => $user['id'], 'action' => '登录后台', 'data' => 'IP:' . $this->clientip, 'addtime' => date("Y-m-d H:i:s")]);
+        DB::name('user')->where('id', $user['id'])->update(['lasttime' => date("Y-m-d H:i:s")]);
+        $session = md5($user['id'] . $user['password']);
+        $expiretime = time() + 2562000;
+        $token = authcode("user\t{$user['id']}\t{$session}\t{$expiretime}", 'ENCODE', config_get('sys_key'));
         cookie('user_token', $token, ['expire' => $expiretime, 'httponly' => true]);
-        return redirect('/record/'.$row['id']);
+    }
+
+    private function loginDomain($row)
+    {
+        Db::name('log')->insert(['uid' => 0, 'action' => '域名快捷登录', 'data' => 'IP:' . $this->clientip, 'addtime' => date("Y-m-d H:i:s"), 'domain' => $row['name']]);
+        $session = md5($row['id'] . $row['name']);
+        $expiretime = time() + 2562000;
+        $token = authcode("domain\t{$row['id']}\t{$session}\t{$expiretime}", 'ENCODE', config_get('sys_key'));
+        cookie('user_token', $token, ['expire' => $expiretime, 'httponly' => true]);
+    }
+
+    public function verifycode()
+    {
+        return captcha();
     }
 }

app/controller/Cert.php

@@ -0,0 +1,838 @@
+<?php
+
+namespace app\controller;
+
+use app\BaseController;
+use app\lib\CertHelper;
+use app\lib\DeployHelper;
+use app\service\CertOrderService;
+use app\service\CertDeployService;
+use Exception;
+use think\facade\Db;
+use think\facade\View;
+use think\facade\Cache;
+
+class Cert extends BaseController
+{
+    public function certaccount()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        return view();
+    }
+
+    public function deployaccount()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        return view();
+    }
+
+    public function account_data()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        $deploy = input('get.deploy/d', 0);
+        $kw = $this->request->post('kw', null, 'trim');
+        $offset = input('post.offset/d');
+        $limit = input('post.limit/d');
+
+        $select = Db::name('cert_account')->where('deploy', $deploy);
+        if (!empty($kw)) {
+            $select->whereLike('name|remark', '%' . $kw . '%');
+        }
+        $total = $select->count();
+        $rows = $select->order('id', 'desc')->limit($offset, $limit)->select();
+
+        $list = [];
+        foreach ($rows as $row) {
+            $row['typename'] = $deploy == 1 ? DeployHelper::$deploy_config[$row['type']]['name'] : CertHelper::$cert_config[$row['type']]['name'];
+            $row['icon'] = $deploy == 1 ? DeployHelper::$deploy_config[$row['type']]['icon'] : CertHelper::$cert_config[$row['type']]['icon'];
+            $list[] = $row;
+        }
+
+        return json(['total' => $total, 'rows' => $list]);
+    }
+
+    public function account_op()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        $action = input('param.action');
+        $deploy = input('post.deploy/d', 0);
+        $title = $deploy == 1 ? '自动部署账户' : 'SSL证书账户';
+
+        if ($action == 'add') {
+            $type = input('post.type');
+            $name = input('post.name', null, 'trim');
+            $config = input('post.config', null, 'trim');
+            $remark = input('post.remark', null, 'trim');
+            if ($type == 'local') $name = '复制到本机';
+            if (empty($name) || empty($config)) return json(['code' => -1, 'msg' => '必填参数不能为空']);
+            if (Db::name('cert_account')->where('type', $type)->where('config', $config)->find()) {
+                return json(['code' => -1, 'msg' => $title.'已存在']);
+            }
+            Db::startTrans();
+            $id = Db::name('cert_account')->insertGetId([
+                'type' => $type,
+                'name' => $name,
+                'config' => $config,
+                'remark' => $remark,
+                'deploy' => $deploy,
+                'addtime' => date('Y-m-d H:i:s'),
+            ]);
+            try {
+                $this->checkAccount($id, $type, $deploy);
+                Db::commit();
+                return json(['code' => 0, 'msg' => '添加'.$title.'成功！']);
+            } catch(Exception $e) {
+                Db::rollback();
+                return json(['code' => -1, 'msg' => $e->getMessage()]);
+            }
+        } elseif ($action == 'edit') {
+            $id = input('post.id/d');
+            $row = Db::name('cert_account')->where('id', $id)->find();
+            if (!$row) return json(['code' => -1, 'msg' => $title.'不存在']);
+            $type = input('post.type');
+            $name = input('post.name', null, 'trim');
+            $config = input('post.config', null, 'trim');
+            $remark = input('post.remark', null, 'trim');
+            if ($type == 'local') $name = '复制到本机';
+            if (empty($name) || empty($config)) return json(['code' => -1, 'msg' => '必填参数不能为空']);
+            if (Db::name('cert_account')->where('type', $type)->where('config', $config)->where('id', '<>', $id)->find()) {
+                return json(['code' => -1, 'msg' => $title.'已存在']);
+            }
+            Db::startTrans();
+            Db::name('cert_account')->where('id', $id)->update([
+                'type' => $type,
+                'name' => $name,
+                'config' => $config,
+                'remark' => $remark,
+            ]);
+            try {
+                $this->checkAccount($id, $type, $deploy);
+                Db::commit();
+                return json(['code' => 0, 'msg' => '修改'.$title.'成功！']);
+            } catch(Exception $e) {
+                Db::rollback();
+                return json(['code' => -1, 'msg' => $e->getMessage()]);
+            }
+        } elseif ($action == 'del') {
+            $id = input('post.id/d');
+            if($deploy == 0){
+                $dcount = DB::name('cert_order')->where('aid', $id)->count();
+                if ($dcount > 0) return json(['code' => -1, 'msg' => '该'.$title.'下存在证书订单，无法删除']);
+            }else{
+                $dcount = DB::name('cert_deploy')->where('aid', $id)->count();
+                if ($dcount > 0) return json(['code' => -1, 'msg' => '该'.$title.'下存在自动部署任务，无法删除']);
+            }
+            Db::name('cert_account')->where('id', $id)->delete();
+            return json(['code' => 0]);
+        }
+        return json(['code' => -3]);
+    }
+
+    public function account_form()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        $action = input('param.action');
+        $deploy = input('get.deploy/d', 0);
+        $title = $deploy == 1 ? '自动部署账户' : 'SSL证书账户';
+
+        $account = null;
+        if ($action == 'edit') {
+            $id = input('get.id/d');
+            $account = Db::name('cert_account')->where('id', $id)->find();
+            if (empty($account)) return $this->alert('error', $title.'不存在');
+        }
+
+        $typeList = $deploy == 1 ? DeployHelper::getList() : CertHelper::getList();
+        $classList = $deploy == 1 ? DeployHelper::$class_config : CertHelper::$class_config;
+
+        View::assign('title', $title);
+        View::assign('info', $account);
+        View::assign('typeList', $typeList);
+        View::assign('classList', $classList);
+        View::assign('action', $action);
+        View::assign('deploy', $deploy);
+        return View::fetch();
+    }
+
+    private function checkAccount($id, $type, $deploy)
+    {
+        if($deploy == 0){
+            $mod = CertHelper::getModel($id);
+            if($mod){
+                try{
+                    $ext = $mod->register();
+                    if(is_array($ext)){
+                        Db::name('cert_account')->where('id', $id)->update(['ext'=>json_encode($ext)]);
+                    }
+                    return true;
+                }catch(Exception $e){
+                    throw new Exception('验证SSL证书账户失败，' . $e->getMessage());
+                }
+            }else{
+                throw new Exception('SSL证书申请模块'.$type.'不存在');
+            }
+        }else{
+            $mod = DeployHelper::getModel($id);
+            if($mod){
+                try{
+                    $mod->check();
+                    return true;
+                }catch(Exception $e){
+                    throw new Exception('验证自动部署账户失败，' . $e->getMessage());
+                }
+            }else{
+                throw new Exception('SSL证书申请模块'.$type.'不存在');
+            }
+        }
+    }
+
+    public function certorder()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        $types = [];
+        foreach(CertHelper::$cert_config as $key=>$value){
+            $types[$key] = $value['name'];
+        }
+        View::assign('types', $types);
+        return view();
+    }
+
+    public function order_data()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        $domain = $this->request->post('domain', null, 'trim');
+        $id = input('post.id');
+        $type = input('post.type', null, 'trim');
+        $status = input('post.status', null, 'trim');
+        $offset = input('post.offset/d');
+        $limit = input('post.limit/d');
+
+        $select = Db::name('cert_order')->alias('A')->join('cert_account B', 'A.aid = B.id');
+        if (!empty($id)) {
+            $select->where('A.id', $id);
+        }elseif (!empty($domain)) {
+            $oids = Db::name('cert_domain')->where('domain', 'like', '%' . $domain . '%')->column('oid');
+            $select->whereIn('A.id', $oids);
+        }
+        if (!empty($type)) {
+            $select->where('B.type', $type);
+        }
+        if (!isNullOrEmpty($status)) {
+            if ($status == '5') {
+                $select->where('A.status', '<', 0);
+            } elseif ($status == '6') {
+                $select->where('A.expiretime', '<', date('Y-m-d H:i:s', time() + 86400 * 7))->where('A.expiretime', '>=', date('Y-m-d H:i:s'));
+            } elseif ($status == '7') {
+                $select->where('A.expiretime', '<', date('Y-m-d H:i:s'));
+            } else {
+                $select->where('A.status', $status);
+            }
+        }
+        $total = $select->count();
+        $rows = $select->fieldRaw('A.*,B.type,B.remark aremark')->order('id', 'desc')->limit($offset, $limit)->select();
+
+        $list = [];
+        foreach ($rows as $row) {
+            $row['typename'] = CertHelper::$cert_config[$row['type']]['name'];
+            $row['icon'] = CertHelper::$cert_config[$row['type']]['icon'];
+            $row['domains'] = Db::name('cert_domain')->where('oid', $row['id'])->order('sort','ASC')->column('domain');
+            $row['end_day'] = $row['expiretime'] ? ceil((strtotime($row['expiretime']) - time()) / 86400) : null;
+            if($row['error']) $row['error'] = htmlspecialchars(str_replace("'", "\\'", $row['error']));
+            $list[] = $row;
+        }
+
+        return json(['total' => $total, 'rows' => $list]);
+    }
+
+    public function order_op()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        $action = input('param.action');
+
+        if ($action == 'get') {
+            $id = input('post.id/d');
+            $row = Db::name('cert_order')->where('id', $id)->field('fullchain,privatekey')->find();
+            if (!$row) return $this->alert('error', '证书订单不存在');
+            $pfx = CertHelper::getPfx($row['fullchain'], $row['privatekey']);
+            $row['pfx'] = base64_encode($pfx);
+            return json(['code' => 0, 'data' => $row]);
+        } elseif ($action == 'add') {
+            $domains = input('post.domains', [], 'trim');
+            $order = [
+                'aid' => input('post.aid/d'),
+                'keytype' => input('post.keytype'),
+                'keysize' => input('post.keysize'),
+                'addtime' => date('Y-m-d H:i:s'),
+                'issuer' => '',
+                'status' => 0,
+            ];
+            $domains = array_map('trim', $domains);
+            $domains = array_filter($domains, function ($v) {
+                return !empty($v);
+            });
+            $domains = array_unique($domains);
+            if (empty($domains)) return json(['code' => -1, 'msg' => '绑定域名不能为空']);
+            if (empty($order['aid']) || empty($order['keytype']) || empty($order['keysize'])) return json(['code' => -1, 'msg' => '必填参数不能为空']);
+
+            $res = $this->check_order($order, $domains);
+            if (is_array($res)) return json($res);
+
+            Db::startTrans();
+            $id = Db::name('cert_order')->insertGetId($order);
+            $domainList = [];
+            $i=1;
+            foreach($domains as $domain){
+                $domainList[] = [
+                    'oid' => $id,
+                    'domain' => convertDomainToAscii($domain),
+                    'sort' => $i++,
+                ];
+            }
+            Db::name('cert_domain')->insertAll($domainList);
+            Db::commit();
+            return json(['code' => 0, 'msg' => '添加证书订单成功！']);
+        } elseif ($action == 'edit') {
+            $id = input('post.id/d');
+            $row = Db::name('cert_order')->where('id', $id)->find();
+            if (!$row) return json(['code' => -1, 'msg' => '证书订单不存在']);
+            
+            $domains = input('post.domains', [], 'trim');
+            $order = [
+                'aid' => input('post.aid/d'),
+                'keytype' => input('post.keytype'),
+                'keysize' => input('post.keysize'),
+                'updatetime' => date('Y-m-d H:i:s'),
+            ];
+            $domains = array_map('trim', $domains);
+            $domains = array_filter($domains, function ($v) {
+                return !empty($v);
+            });
+            $domains = array_unique($domains);
+            if (empty($domains)) return json(['code' => -1, 'msg' => '绑定域名不能为空']);
+            if (empty($order['aid']) || empty($order['keytype']) || empty($order['keysize'])) return json(['code' => -1, 'msg' => '必填参数不能为空']);
+
+            $res = $this->check_order($order, $domains);
+            if (is_array($res)) return json($res);
+
+            Db::startTrans();
+            Db::name('cert_order')->where('id', $id)->update($order);
+            Db::name('cert_domain')->where('oid', $id)->delete();
+            $domainList = [];
+            $i=1;
+            foreach($domains as $domain){
+                $domainList[] = [
+                    'oid' => $id,
+                    'domain' => convertDomainToAscii($domain),
+                    'sort' => $i++,
+                ];
+            }
+            Db::name('cert_domain')->insertAll($domainList);
+            Db::commit();
+            return json(['code' => 0, 'msg' => '修改证书订单成功！']);
+        } elseif ($action == 'import') {
+            $fullchain = input('post.fullchain', null, 'trim');
+            $privatekey = input('post.privatekey', null, 'trim');
+            if (!openssl_x509_read($fullchain)) return json(['code' => -1, 'msg' => '证书内容填写错误']);
+            if (!openssl_get_privatekey($privatekey)) return json(['code' => -1, 'msg' => '私钥内容填写错误']);
+            if (!openssl_x509_check_private_key($fullchain, $privatekey)) return json(['code' => -1, 'msg' => 'SSL证书与私钥不匹配']);
+            $certInfo = openssl_x509_parse($fullchain, true);
+            if (!$certInfo || !isset($certInfo['extensions']['subjectAltName'])) return json(['code' => -1, 'msg' => '证书内容解析失败']);
+
+            $domains = [];
+            $subjectAltName = explode(',', $certInfo['extensions']['subjectAltName']);
+            foreach ($subjectAltName as $domain) {
+                $domain = trim($domain);
+                if (strpos($domain, 'DNS:') === 0) $domain = substr($domain, 4);
+                if (!empty($domain)) {
+                    $domains[] = $domain;
+                }
+            }
+            $domains = array_unique($domains);
+            if (empty($domains)) return json(['code' => -1, 'msg' => '证书绑定域名不能为空']);
+            $issuetime = date('Y-m-d H:i:s', $certInfo['validFrom_time_t']);
+            $expiretime = date('Y-m-d H:i:s', $certInfo['validTo_time_t']);
+            $issuer = $certInfo['issuer']['CN'];
+
+            $order_ids = Db::name('cert_order')->where('issuetime', $issuetime)->column('id');
+            if (!empty($order_ids)) {
+                foreach ($order_ids as $order_id) {
+                    $domains2 = Db::name('cert_domain')->where('oid', $order_id)->column('domain');
+                    if (arrays_are_equal($domains2, $domains)) {
+                        return json(['code' => -1, 'msg' => '该证书已存在，无需重复添加']);
+                    }
+                }
+            }
+
+            $order = [
+                'aid' => input('post.aid/d'),
+                'keytype' => input('post.keytype'),
+                'keysize' => input('post.keysize'),
+                'addtime' => date('Y-m-d H:i:s'),
+                'updatetime' => date('Y-m-d H:i:s'),
+                'issuetime' => $issuetime,
+                'expiretime' => $expiretime,
+                'issuer' => $issuer,
+                'status' => 3,
+                'fullchain' => $fullchain,
+                'privatekey' => $privatekey,
+            ];
+            if (empty($order['aid']) || empty($order['keytype']) || empty($order['keysize'])) return json(['code' => -1, 'msg' => '必填参数不能为空']);
+
+            $res = $this->check_order($order, $domains);
+            if (is_array($res)) return json($res);
+
+            Db::startTrans();
+            $id = Db::name('cert_order')->insertGetId($order);
+            $domainList = [];
+            $i = 1;
+            foreach ($domains as $domain) {
+                $domainList[] = [
+                    'oid' => $id,
+                    'domain' => $domain,
+                    'sort' => $i++,
+                ];
+            }
+            Db::name('cert_domain')->insertAll($domainList);
+            Db::commit();
+            return json(['code' => 0, 'msg' => '导入证书成功！']);
+        } elseif ($action == 'del') {
+            $id = input('post.id/d');
+            $dcount = DB::name('cert_deploy')->where('oid', $id)->count();
+            if ($dcount > 0) return json(['code' => -1, 'msg' => '该证书关联了自动部署任务，无法删除']);
+            try{
+                (new CertOrderService($id))->cancel();
+            }catch(Exception $e){
+            }
+            Db::name('cert_order')->where('id', $id)->delete();
+            Db::name('cert_domain')->where('oid', $id)->delete();
+            return json(['code' => 0]);
+        } elseif ($action == 'setauto') {
+            $id = input('post.id/d');
+            $isauto = input('post.isauto/d');
+            Db::name('cert_order')->where('id', $id)->update(['isauto' => $isauto]);
+            return json(['code' => 0]);
+        } elseif ($action == 'reset') {
+            $id = input('post.id/d');
+            try{
+                $service = new CertOrderService($id);
+                $service->cancel();
+                $service->reset();
+                return json(['code' => 0]);
+            }catch(Exception $e){
+                return json(['code' => -1, 'msg' => $e->getMessage()]);
+            }
+        } elseif ($action == 'revoke') {
+            $id = input('post.id/d');
+            try{
+                $service = new CertOrderService($id);
+                $service->revoke();
+                return json(['code' => 0]);
+            }catch(Exception $e){
+                return json(['code' => -1, 'msg' => $e->getMessage()]);
+            }
+        } elseif ($action == 'show_log') {
+            $processid = input('post.processid');
+            $file = app()->getRuntimePath().'log/'.$processid.'.log';
+            if(!file_exists($file)) return json(['code' => -1, 'msg' => '日志文件不存在']);
+            return json(['code' => 0, 'data' => file_get_contents($file), 'time'=>filemtime($file)]);
+        }
+        return json(['code' => -3]);
+    }
+
+    private function check_order($order, $domains)
+    {
+        $account = Db::name('cert_account')->where('id', $order['aid'])->find();
+        if (!$account) return ['code' => -1, 'msg' => 'SSL证书账户不存在'];
+        $max_domains = CertHelper::$cert_config[$account['type']]['max_domains'];
+        $wildcard = CertHelper::$cert_config[$account['type']]['wildcard'];
+        $cname = CertHelper::$cert_config[$account['type']]['cname'];
+        if (count($domains) > $max_domains) {
+            if (!(count($domains) == 2 && $max_domains == 1 && ltrim($domains[0], 'www.') == ltrim($domains[1], 'www.'))) {
+                return ['code' => -1, 'msg' => '域名数量不能超过'.$max_domains.'个'];
+            }
+        }
+
+        foreach($domains as $domain){
+            if (!$wildcard && strpos($domain, '*') !== false) return ['code' => -1, 'msg' => '该证书账户类型不支持泛域名'];
+            if (preg_match('/[\x{4e00}-\x{9fa5}]/u', $domain) && !function_exists('idn_to_ascii')) return ['code' => -1, 'msg' => '域名包含中文，请开启intl扩展'];
+            $mainDomain = getMainDomain($domain);
+            $drow = Db::name('domain')->where('name', $mainDomain)->find();
+            if (!$drow) {
+                if (substr($domain, 0, 2) == '*.') $domain = substr($domain, 2);
+                if (!$cname || !Db::name('cert_cname')->where('domain', $domain)->where('status', 1)->find()) {
+                    return ['code' => -1, 'msg' => '域名'.$domain.'未在本系统添加'];
+                }
+            }
+        }
+        return true;
+    }
+
+    public function order_process()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        if (function_exists("set_time_limit")) {
+            @set_time_limit(0);
+        }
+        if (function_exists("ignore_user_abort")) {
+            @ignore_user_abort(true);
+        }
+        $id = input('post.id/d');
+        $reset = input('post.reset/d', 0);
+        try{
+            $service = new CertOrderService($id);
+            if($reset == 1){
+                $service->reset();
+            }
+            $retcode = $service->process(true);
+            if($retcode == 3){
+                return json(['code' => 0, 'msg' => '证书已签发成功！']);
+            }elseif($retcode == 1){
+                return json(['code' => 0, 'msg' => '添加DNS记录成功！请等待DNS生效后点击验证']);
+            }
+        }catch(Exception $e){
+            return json(['code' => -1, 'msg' => $e->getMessage(), 'trace' => $e->getTrace()]);
+        }
+    }
+
+    public function order_form()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        $action = input('param.action');
+
+        $order = null;
+        if ($action == 'edit') {
+            $id = input('get.id/d');
+            $order = Db::name('cert_order')->where('id', $id)->fieldRaw('id,aid,keytype,keysize,status')->find();
+            if (empty($order)) return $this->alert('error', '证书订单不存在');
+            $order['domains'] = Db::name('cert_domain')->where('oid', $order['id'])->order('sort','ASC')->column('domain');
+        }
+
+        $accounts = [];
+        foreach (Db::name('cert_account')->where('deploy', 0)->select() as $row) {
+            $accounts[$row['id']] = ['name'=>$row['id'].'_'.CertHelper::$cert_config[$row['type']]['name'], 'type'=>$row['type']];
+            if (!empty($row['remark'])) {
+                $accounts[$row['id']]['name'] .= '（' . $row['remark'] . '）';
+            }
+        }
+        View::assign('accounts', $accounts);
+
+        View::assign('info', $order);
+        View::assign('action', $action);
+        return View::fetch();
+    }
+
+    public function order_import()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        $accounts = [];
+        foreach (Db::name('cert_account')->where('deploy', 0)->select() as $row) {
+            $accounts[$row['id']] = ['name'=>$row['id'].'_'.CertHelper::$cert_config[$row['type']]['name'], 'type'=>$row['type']];
+            if (!empty($row['remark'])) {
+                $accounts[$row['id']]['name'] .= '（' . $row['remark'] . '）';
+            }
+        }
+        View::assign('accounts', $accounts);
+        return View::fetch();
+    }
+
+
+    public function deploytask()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        $types = [];
+        foreach(DeployHelper::$deploy_config as $key=>$value){
+            $types[$key] = $value['name'];
+        }
+        View::assign('types', $types);
+        return view();
+    }
+
+    public function deploy_data()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        $domain = $this->request->post('domain', null, 'trim');
+        $oid = input('post.oid');
+        $type = input('post.type', null, 'trim');
+        $status = input('post.status', null, 'trim');
+        $remark = input('post.remark', null, 'trim');
+        $offset = input('post.offset/d');
+        $limit = input('post.limit/d');
+
+        $select = Db::name('cert_deploy')->alias('A')->join('cert_account B', 'A.aid = B.id')->join('cert_order C', 'A.oid = C.id')->join('cert_account D', 'C.aid = D.id');
+        if (!empty($oid)) {
+            $select->where('A.oid', $oid);
+        } elseif (!empty($domain)) {
+            $oids = Db::name('cert_domain')->where('domain', 'like', '%' . $domain . '%')->column('oid');
+            $select->whereIn('oid', $oids);
+        }
+        if (!empty($type)) {
+            $select->where('B.type', $type);
+        }
+        if (!isNullOrEmpty($status)) {
+            $select->where('A.status', $status);
+        }
+        if (!empty($remark)) {
+            $select->where('A.remark', $remark);
+        }
+        $total = $select->count();
+        $rows = $select->fieldRaw('A.*,B.type,B.remark aremark,B.name aname,D.type certtype,D.id certaid')->order('id', 'desc')->limit($offset, $limit)->select();
+
+        $list = [];
+        foreach ($rows as $row) {
+            $row['typename'] = DeployHelper::$deploy_config[$row['type']]['name'];
+            $row['icon'] = DeployHelper::$deploy_config[$row['type']]['icon'];
+            $row['certtypename'] = CertHelper::$cert_config[$row['certtype']]['name'];
+            $row['domains'] = Db::name('cert_domain')->where('oid', $row['oid'])->order('sort','ASC')->column('domain');
+            if($row['error']) $row['error'] = htmlspecialchars(str_replace("'", "\\'", $row['error']));
+            $list[] = $row;
+        }
+
+        return json(['total' => $total, 'rows' => $list]);
+    }
+
+    public function deploy_op()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        $action = input('param.action');
+
+        if ($action == 'add') {
+            $task = [
+                'aid' => input('post.aid/d'),
+                'oid' => input('post.oid/d'),
+                'config' => input('post.config', null, 'trim'),
+                'remark' => input('post.remark', null, 'trim'),
+                'addtime' => date('Y-m-d H:i:s'),
+                'status' => 0,
+                'active' => 1
+            ];
+            if (empty($task['aid']) || empty($task['oid']) || empty($task['config'])) return json(['code' => -1, 'msg' => '必填参数不能为空']);
+            Db::name('cert_deploy')->insert($task);
+            return json(['code' => 0, 'msg' => '添加自动部署任务成功！']);
+        } elseif ($action == 'edit') {
+            $id = input('post.id/d');
+            $row = Db::name('cert_deploy')->where('id', $id)->find();
+            if (!$row) return json(['code' => -1, 'msg' => '自动部署任务不存在']);
+            
+            $task = [
+                'aid' => input('post.aid/d'),
+                'oid' => input('post.oid/d'),
+                'config' => input('post.config', null, 'trim'),
+                'remark' => input('post.remark', null, 'trim'),
+            ];
+            if (empty($task['aid']) || empty($task['oid']) || empty($task['config'])) return json(['code' => -1, 'msg' => '必填参数不能为空']);
+            Db::name('cert_deploy')->where('id', $id)->update($task);
+            return json(['code' => 0, 'msg' => '修改自动部署任务成功！']);
+        } elseif ($action == 'del') {
+            $id = input('post.id/d');
+            Db::name('cert_deploy')->where('id', $id)->delete();
+            return json(['code' => 0]);
+        } elseif ($action == 'setactive') {
+            $id = input('post.id/d');
+            $active = input('post.active/d');
+            Db::name('cert_deploy')->where('id', $id)->update(['active' => $active]);
+            return json(['code' => 0]);
+        } elseif ($action == 'reset') {
+            $id = input('post.id/d');
+            try{
+                $service = new CertDeployService($id);
+                $service->reset();
+                return json(['code' => 0]);
+            }catch(Exception $e){
+                return json(['code' => -1, 'msg' => $e->getMessage()]);
+            }
+        } elseif ($action == 'show_log') {
+            $processid = input('post.processid');
+            $file = app()->getRuntimePath().'log/'.$processid.'.log';
+            if(!file_exists($file)) return json(['code' => -1, 'msg' => '日志文件不存在']);
+            return json(['code' => 0, 'data' => file_get_contents($file), 'time'=>filemtime($file)]);
+        }
+        return json(['code' => -3]);
+    }
+
+    public function deploy_process()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        if (function_exists("set_time_limit")) {
+            @set_time_limit(0);
+        }
+        if (function_exists("ignore_user_abort")) {
+            @ignore_user_abort(true);
+        }
+        $id = input('post.id/d');
+        $reset = input('post.reset/d', 0);
+        try{
+            $service = new CertDeployService($id);
+            if($reset == 1){
+                $service->reset();
+            }
+            $service->process(true);
+            return json(['code' => 0, 'msg' => 'SSL证书部署任务执行成功！']);
+        }catch(Exception $e){
+            return json(['code' => -1, 'msg' => $e->getMessage(), 'trace' => $e->getTrace()]);
+        }
+    }
+
+    public function deploy_form()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        $action = input('param.action');
+
+        $task = null;
+        if ($action == 'edit') {
+            $id = input('get.id/d');
+            $task = Db::name('cert_deploy')->alias('A')->join('cert_account B', 'A.aid = B.id')->where('A.id', $id)->fieldRaw('A.id,A.aid,A.oid,A.config,A.remark,B.type')->find();
+            if (empty($task)) return $this->alert('error', '自动部署任务不存在');
+        }
+
+        $accounts = [];
+        foreach (Db::name('cert_account')->where('deploy', 1)->select() as $row) {
+            $accounts[$row['id']] = ['name'=>$row['id'].'_'.DeployHelper::$deploy_config[$row['type']]['name'], 'type'=>$row['type']];
+            if (!empty($row['remark'])) {
+                $accounts[$row['id']]['name'] .= '（' . $row['remark'] . '）';
+            }
+        }
+        View::assign('accounts', $accounts);
+
+        $orders = [];
+        foreach (Db::name('cert_order')->alias('A')->join('cert_account B', 'A.aid = B.id')->where('status', '<>', 4)->fieldRaw('A.id,A.aid,B.type,B.remark aremark')->order('id', 'desc')->select() as $row) {
+            $domains = Db::name('cert_domain')->where('oid', $row['id'])->order('sort','ASC')->column('domain');
+            $domainstr = count($domains) > 2 ? implode('、',array_slice($domains, 0, 2)).'等'.count($domains).'个域名' : implode('、',$domains);
+            $orders[$row['id']] = ['name'=>$row['id'].'_'.$domainstr.'（'.CertHelper::$cert_config[$row['type']]['name'].'）'];
+        }
+        View::assign('orders', $orders);
+
+        View::assign('info', $task);
+        View::assign('action', $action);
+        View::assign('typeList', DeployHelper::getList());
+        return View::fetch();
+    }
+
+    public function cname()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        $domains = [];
+        foreach (Db::name('domain')->field('id,name')->select() as $row) {
+            $domains[$row['id']] = $row['name'];
+        }
+        View::assign('domains', $domains);
+        return view();
+    }
+
+    public function cname_data()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        $kw = $this->request->post('kw', null, 'trim');
+        $offset = input('post.offset/d');
+        $limit = input('post.limit/d');
+
+        $select = Db::name('cert_cname')->alias('A')->join('domain B', 'A.did = B.id');
+        if (!empty($kw)) {
+            $select->whereLike('A.domain', '%' . $kw . '%');
+        }
+        $total = $select->count();
+        $rows = $select->order('A.id', 'desc')->limit($offset, $limit)->field('A.*,B.name cnamedomain')->select();
+
+        $list = [];
+        foreach ($rows as $row) {
+            $row['host'] = $this->getCnameHost($row['domain']);
+            $row['record'] = $row['rr'] . '.' . $row['cnamedomain'];
+            $list[] = $row;
+        }
+
+        return json(['total' => $total, 'rows' => $list]);
+    }
+
+    private function getCnameHost($domain)
+    {
+        $main = getMainDomain($domain);
+        if ($main == $domain) {
+            return '_acme-challenge';
+        } else {
+            return '_acme-challenge.' . substr($domain, 0, -strlen($main) - 1);
+        }
+    }
+
+    public function cname_op()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        $action = input('param.action');
+
+        if ($action == 'add') {
+            $data = [
+                'domain' => input('post.domain', null, 'trim'),
+                'rr' => input('post.rr', null, 'trim'),
+                'did' => input('post.did/d'),
+                'addtime' => date('Y-m-d H:i:s'),
+                'status' => 0
+            ];
+            if (empty($data['domain']) || empty($data['rr']) || empty($data['did'])) return json(['code' => -1, 'msg' => '必填参数不能为空']);
+            if (!checkDomain($data['domain'])) return json(['code' => -1, 'msg' => '域名格式不正确']);
+            if (Db::name('cert_cname')->where('domain', $data['domain'])->find()) {
+                return json(['code' => -1, 'msg' => '域名'.$data['domain'].'已存在']);
+            }
+            if (Db::name('cert_cname')->where('rr', $data['rr'])->where('did', $data['did'])->find()) {
+                return json(['code' => -1, 'msg' => '已存在相同CNAME记录值']);
+            }
+            Db::name('cert_cname')->insert($data);
+            return json(['code' => 0, 'msg' => '添加CMAME代理成功！']);
+        } elseif ($action == 'edit') {
+            $id = input('post.id/d');
+            $row = Db::name('cert_cname')->where('id', $id)->find();
+            if (!$row) return json(['code' => -1, 'msg' => 'CMAME代理不存在']);
+            
+            $data = [
+                'rr' => input('post.rr', null, 'trim'),
+                'did' => input('post.did/d'),
+            ];
+            if ($row['rr'] != $data['rr'] || $row['did'] != $data['did']) {
+                $data['status'] = 0;
+            }
+            if (empty($data['rr']) || empty($data['did'])) return json(['code' => -1, 'msg' => '必填参数不能为空']);
+            if (Db::name('cert_cname')->where('rr', $data['rr'])->where('did', $data['did'])->where('id', '<>', $id)->find()) {
+                return json(['code' => -1, 'msg' => '已存在相同CNAME记录值']);
+            }
+            Db::name('cert_cname')->where('id', $id)->update($data);
+            return json(['code' => 0, 'msg' => '修改CMAME代理成功！']);
+        } elseif ($action == 'del') {
+            $id = input('post.id/d');
+            Db::name('cert_cname')->where('id', $id)->delete();
+            return json(['code' => 0]);
+        } elseif ($action == 'check') {
+            $id = input('post.id/d');
+            $row = Db::name('cert_cname')->alias('A')->join('domain B', 'A.did = B.id')->where('A.id', $id)->field('A.*,B.name cnamedomain')->find();
+            if (!$row) return json(['code' => -1, 'msg' => '自动部署任务不存在']);
+
+            $status = 1;
+            $domain = '_acme-challenge.' . $row['domain'];
+            $record = $row['rr'] . '.' . $row['cnamedomain'];
+            $result = \app\utils\DnsQueryUtils::get_dns_records($domain, 'CNAME');
+            if(!$result || !in_array($record, $result)){
+                $result = \app\utils\DnsQueryUtils::query_dns_doh($domain, 'CNAME');
+                if(!$result || !in_array($record, $result)){
+                    $status = 0;
+                }
+            }
+            if($status != $row['status']){
+                Db::name('cert_cname')->where('id', $id)->update(['status' => $status]);
+            }
+            return json(['code' => 0, 'status' => $status]);
+        }
+    }
+
+    public function certset()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        if ($this->request->isPost()) {
+            $params = input('post.');
+            foreach ($params as $key => $value) {
+                if (empty($key)) {
+                    continue;
+                }
+                config_set($key, $value);
+                Cache::delete('configs');
+            }
+            return json(['code' => 0, 'msg' => 'succ']);
+        }
+        return View::fetch();
+    }
+}

app/controller/Dmonitor.php

@@ -1,23 +1,22 @@
 <?php
+
 namespace app\controller;
 
 use app\BaseController;
-use Exception;
 use think\facade\Db;
 use think\facade\View;
 use think\facade\Cache;
-use app\lib\DnsHelper;
 
 class Dmonitor extends BaseController
 {
     public function overview()
     {
-        if(!checkPermission(2)) return $this->alert('error', '无权限');
-        $switch_count = Db::name('dmlog')->where('date', '>=', date("Y-m-d H:i:s",strtotime("-1 days")))->count();
-        $fail_count = Db::name('dmlog')->where('date', '>=', date("Y-m-d H:i:s",strtotime("-1 days")))->where('action', 1)->count();
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        $switch_count = Db::name('dmlog')->where('date', '>=', date("Y-m-d H:i:s", strtotime("-1 days")))->count();
+        $fail_count = Db::name('dmlog')->where('date', '>=', date("Y-m-d H:i:s", strtotime("-1 days")))->where('action', 1)->count();
 
         $run_time = config_get('run_time', null, true);
-        $run_state = $run_time ? (time()-strtotime($run_time) > 10 ? 0 : 1) : 0;
+        $run_state = $run_time ? (time() - strtotime($run_time) > 10 ? 0 : 1) : 0;
         View::assign('info', [
             'run_count' => config_get('run_count', null, true) ?? 0,
             'run_time' => $run_time ?? '无',
@@ -32,47 +31,48 @@ class Dmonitor extends BaseController
 
     public function task()
     {
-        if(!checkPermission(2)) return $this->alert('error', '无权限');
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
         return View::fetch();
     }
 
-    public function task_data(){
-        if(!checkPermission(2)) return json(['total'=>0, 'rows'=>[]]);
+    public function task_data()
+    {
+        if (!checkPermission(2)) return json(['total' => 0, 'rows' => []]);
         $type = input('post.type/d', 1);
         $kw = input('post.kw', null, 'trim');
         $offset = input('post.offset/d');
         $limit = input('post.limit/d');
 
-        $select = Db::name('dmtask')->alias('A')->join('domain B','A.did = B.id');
-        if(!empty($kw)){
-            if($type == 1){
-                $select->whereLike('rr|B.name', '%'.$kw.'%');
-            }elseif($type == 2){
+        $select = Db::name('dmtask')->alias('A')->join('domain B', 'A.did = B.id');
+        if (!empty($kw)) {
+            if ($type == 1) {
+                $select->whereLike('rr|B.name', '%' . $kw . '%');
+            } elseif ($type == 2) {
                 $select->where('recordid', $kw);
-            }elseif($type == 3){
+            } elseif ($type == 3) {
                 $select->where('main_value', $kw);
-            }elseif($type == 4){
+            } elseif ($type == 4) {
                 $select->where('backup_value', $kw);
-            }elseif($type == 5){
-                $select->whereLike('remark', '%'.$kw.'%');
+            } elseif ($type == 5) {
+                $select->whereLike('remark', '%' . $kw . '%');
             }
         }
         $total = $select->count();
-        $list = $select->order('A.id','desc')->limit($offset, $limit)->field('A.*,B.name domain')->select()->toArray();
+        $list = $select->order('A.id', 'desc')->limit($offset, $limit)->field('A.*,B.name domain')->select()->toArray();
 
-        foreach($list as &$row){
+        foreach ($list as &$row) {
             $row['checktimestr'] = date('Y-m-d H:i:s', $row['checktime']);
         }
 
-        return json(['total'=>$total, 'rows'=>$list]);
+        return json(['total' => $total, 'rows' => $list]);
     }
 
     public function taskform()
     {
-        if(!checkPermission(2)) return $this->alert('error', '无权限');
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
         $action = input('param.action');
-        if(request()->isPost()){
-            if($action == 'add'){
+        if ($this->request->isPost()) {
+            if ($action == 'add') {
                 $task = [
                     'did' => input('post.did/d'),
                     'rr' => input('post.rr', null, 'trim'),
@@ -86,27 +86,29 @@ class Dmonitor extends BaseController
                     'frequency' => input('post.frequency/d'),
                     'cycle' => input('post.cycle/d'),
                     'timeout' => input('post.timeout/d'),
+                    'proxy' => input('post.proxy/d'),
+                    'cdn' => input('post.cdn') == 'true' || input('post.cdn') == '1' ? 1 : 0,
                     'remark' => input('post.remark', null, 'trim'),
                     'recordinfo' => input('post.recordinfo', null, 'trim'),
                     'addtime' => time(),
                     'active' => 1
                 ];
-    
-                if(empty($task['did']) || empty($task['rr']) || empty($task['recordid']) || empty($task['main_value']) || empty($task['frequency']) || empty($task['cycle'])){
-                    return json(['code'=>-1, 'msg'=>'必填项不能为空']);
+
+                if (empty($task['did']) || empty($task['rr']) || empty($task['recordid']) || empty($task['main_value']) || empty($task['frequency']) || empty($task['cycle'])) {
+                    return json(['code' => -1, 'msg' => '必填项不能为空']);
                 }
-                if($task['checktype'] > 0 && $task['timeout'] > $task['frequency']){
-                    return json(['code'=>-1, 'msg'=>'为保障容灾切换任务正常运行，最大超时时间不能大于检测间隔']);
+                if ($task['checktype'] > 0 && $task['timeout'] > $task['frequency']) {
+                    return json(['code' => -1, 'msg' => '为保障容灾切换任务正常运行，最大超时时间不能大于检测间隔']);
                 }
-                if($task['type'] == 2 && $task['backup_value'] == $task['main_value']){
-                    return json(['code'=>-1, 'msg'=>'主备地址不能相同']);
+                if ($task['type'] == 2 && $task['backup_value'] == $task['main_value']) {
+                    return json(['code' => -1, 'msg' => '主备地址不能相同']);
                 }
-                if(Db::name('dmtask')->where('recordid', $task['recordid'])->find()){
-                    return json(['code'=>-1, 'msg'=>'当前容灾切换策略已存在']);
+                if (Db::name('dmtask')->where('recordid', $task['recordid'])->find()) {
+                    return json(['code' => -1, 'msg' => '当前容灾切换策略已存在']);
                 }
                 Db::name('dmtask')->insert($task);
-                return json(['code'=>0, 'msg'=>'添加成功']);
-            }elseif($action == 'edit'){
+                return json(['code' => 0, 'msg' => '添加成功']);
+            } elseif ($action == 'edit') {
                 $id = input('post.id/d');
                 $task = [
                     'did' => input('post.did/d'),
@@ -121,147 +123,131 @@ class Dmonitor extends BaseController
                     'frequency' => input('post.frequency/d'),
                     'cycle' => input('post.cycle/d'),
                     'timeout' => input('post.timeout/d'),
+                    'proxy' => input('post.proxy/d'),
+                    'cdn' => input('post.cdn') == 'true' || input('post.cdn') == '1' ? 1 : 0,
                     'remark' => input('post.remark', null, 'trim'),
                     'recordinfo' => input('post.recordinfo', null, 'trim'),
                 ];
-    
-                if(empty($task['did']) || empty($task['rr']) || empty($task['recordid']) || empty($task['main_value']) || empty($task['frequency']) || empty($task['cycle'])){
-                    return json(['code'=>-1, 'msg'=>'必填项不能为空']);
+
+                if (empty($task['did']) || empty($task['rr']) || empty($task['recordid']) || empty($task['main_value']) || empty($task['frequency']) || empty($task['cycle'])) {
+                    return json(['code' => -1, 'msg' => '必填项不能为空']);
                 }
-                if($task['checktype'] > 0 && $task['timeout'] > $task['frequency']){
-                    return json(['code'=>-1, 'msg'=>'为保障容灾切换任务正常运行，最大超时时间不能大于检测间隔']);
+                if ($task['checktype'] > 0 && $task['timeout'] > $task['frequency']) {
+                    return json(['code' => -1, 'msg' => '为保障容灾切换任务正常运行，最大超时时间不能大于检测间隔']);
                 }
-                if($task['type'] == 2 && $task['backup_value'] == $task['main_value']){
-                    return json(['code'=>-1, 'msg'=>'主备地址不能相同']);
+                if ($task['type'] == 2 && $task['backup_value'] == $task['main_value']) {
+                    return json(['code' => -1, 'msg' => '主备地址不能相同']);
                 }
-                if(Db::name('dmtask')->where('recordid', $task['recordid'])->where('id', '<>', $id)->find()){
-                    return json(['code'=>-1, 'msg'=>'当前容灾切换策略已存在']);
+                if (Db::name('dmtask')->where('recordid', $task['recordid'])->where('id', '<>', $id)->find()) {
+                    return json(['code' => -1, 'msg' => '当前容灾切换策略已存在']);
                 }
                 Db::name('dmtask')->where('id', $id)->update($task);
-                return json(['code'=>0, 'msg'=>'修改成功']);
-            }elseif($action == 'setactive'){
+                return json(['code' => 0, 'msg' => '修改成功']);
+            } elseif ($action == 'setactive') {
                 $id = input('post.id/d');
                 $active = input('post.active/d');
-                Db::name('dmtask')->where('id', $id)->update(['active'=>$active]);
-                return json(['code'=>0, 'msg'=>'设置成功']);
-            }elseif($action == 'del'){
+                Db::name('dmtask')->where('id', $id)->update(['active' => $active]);
+                return json(['code' => 0, 'msg' => '设置成功']);
+            } elseif ($action == 'del') {
                 $id = input('post.id/d');
                 Db::name('dmtask')->where('id', $id)->delete();
                 Db::name('dmlog')->where('taskid', $id)->delete();
-                return json(['code'=>0, 'msg'=>'删除成功']);
-            }else{
-                return json(['code'=>-1, 'msg'=>'参数错误']);
+                return json(['code' => 0, 'msg' => '删除成功']);
+            } else {
+                return json(['code' => -1, 'msg' => '参数错误']);
             }
         }
         $task = null;
-        if($action == 'edit'){
+        if ($action == 'edit') {
             $id = input('get.id/d');
             $task = Db::name('dmtask')->where('id', $id)->find();
-            if(empty($task)) return $this->alert('error', '切换策略不存在');
+            if (empty($task)) return $this->alert('error', '切换策略不存在');
         }
 
         $domains = [];
-        foreach(Db::name('domain')->select() as $row){
-            $domains[$row['id']] = $row['name'];
+        $domainList = Db::name('domain')->alias('A')->join('account B', 'A.aid = B.id')->field('A.id,A.name,B.type')->select();
+        foreach ($domainList as $row) {
+            $domains[] = ['id'=>$row['id'], 'name'=>$row['name'], 'type'=>$row['type']];
         }
         View::assign('domains', $domains);
 
         View::assign('info', $task);
         View::assign('action', $action);
-        View::assign('support_ping', function_exists('exec')?'1':'0');
+        View::assign('support_ping', function_exists('exec') ? '1' : '0');
         return View::fetch();
     }
 
     public function taskinfo()
     {
-        if(!checkPermission(2)) return $this->alert('error', '无权限');
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
         $id = input('param.id/d');
         $task = Db::name('dmtask')->where('id', $id)->find();
-        if(empty($task)) return $this->alert('error', '切换策略不存在');
+        if (empty($task)) return $this->alert('error', '切换策略不存在');
 
-        $switch_count = Db::name('dmlog')->where('taskid', $id)->where('date', '>=', date("Y-m-d H:i:s",strtotime("-1 days")))->count();
-        $fail_count = Db::name('dmlog')->where('taskid', $id)->where('date', '>=', date("Y-m-d H:i:s",strtotime("-1 days")))->where('action', 1)->count();
+        $switch_count = Db::name('dmlog')->where('taskid', $id)->where('date', '>=', date("Y-m-d H:i:s", strtotime("-1 days")))->count();
+        $fail_count = Db::name('dmlog')->where('taskid', $id)->where('date', '>=', date("Y-m-d H:i:s", strtotime("-1 days")))->where('action', 1)->count();
 
         $task['switch_count'] = $switch_count;
         $task['fail_count'] = $fail_count;
-        if($task['type'] == 3){
+        if ($task['type'] == 3) {
             $task['action_name'] = ['未知', '<font color="red">开启解析</font>', '<font color="green">暂停解析</font>'];
-        }elseif($task['type'] == 2){
+        } elseif ($task['type'] == 2) {
             $task['action_name'] = ['未知', '<font color="red">切换备用解析记录</font>', '<font color="green">恢复主解析记录</font>'];
-        }else{
+        } else {
             $task['action_name'] = ['未知', '<font color="red">暂停解析</font>', '<font color="green">启用解析</font>'];
         }
         View::assign('info', $task);
         return View::fetch();
     }
 
-    public function tasklog_data(){
-        if(!checkPermission(2)) return json(['total'=>0, 'rows'=>[]]);
+    public function tasklog_data()
+    {
+        if (!checkPermission(2)) return json(['total' => 0, 'rows' => []]);
         $taskid = input('param.id/d');
         $offset = input('post.offset/d');
         $limit = input('post.limit/d');
         $action = input('post.action/d', 0);
 
         $select = Db::name('dmlog')->where('taskid', $taskid);
-        if($action > 0){
+        if ($action > 0) {
             $select->where('action', $action);
         }
         $total = $select->count();
-        $list = $select->order('id','desc')->limit($offset, $limit)->select();
+        $list = $select->order('id', 'desc')->limit($offset, $limit)->select();
 
-        return json(['total'=>$total, 'rows'=>$list]);
+        return json(['total' => $total, 'rows' => $list]);
     }
 
     public function noticeset()
     {
-        if(!checkPermission(2)) return $this->alert('error', '无权限');
-        if(request()->isPost()){
-            $params = input('post.');
-            if(isset($params['mail_type']) && isset($params['mail_name2']) && $params['mail_type'] > 0){
-                $params['mail_name'] = $params['mail_name2'];
-                unset($params['mail_name2']);
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        $params = input('post.');
+        foreach ($params as $key => $value) {
+            if (empty($key)) {
+                continue;
             }
-            foreach ($params as $key=>$value){
-                if (empty($key)) {
-                    continue;
-                }
-                config_set($key, $value);
-                Cache::delete('configs'); 
-            }
-            return json(['code'=>0, 'msg'=>'succ']);
-        }
-        return View::fetch();
-    }
-
-    public function mailtest()
-    {
-        if(!checkPermission(2)) return $this->alert('error', '无权限');
-        $mail_name = config_get('mail_recv')?config_get('mail_recv'):config_get('mail_name');
-        if(empty($mail_name)) return json(['code'=>-1, 'msg'=>'您还未设置邮箱！']);
-        $result = \app\lib\MsgNotice::send_mail($mail_name,'邮件发送测试。','这是一封测试邮件！<br/><br/>来自：'.request()->root(true));
-        if($result === true){
-            return json(['code'=>0, 'msg'=>'邮件发送成功！']);
-        }else{
-            return json(['code'=>-1, 'msg'=>'邮件发送失败！'.$result]);
+            config_set($key, $value);
+            Cache::delete('configs');
         }
+        return json(['code' => 0, 'msg' => 'succ']);
     }
 
     public function clean()
     {
-        if(!checkPermission(2)) return $this->alert('error', '无权限');
-        if(request()->isPost()){
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        if ($this->request->isPost()) {
             $days = input('post.days/d');
-            if(!$days || $days < 0) return json(['code'=>-1, 'msg'=>'参数错误']);
-            Db::execute("DELETE FROM `".config('database.connections.mysql.prefix')."dmlog` WHERE `date`<'".date("Y-m-d H:i:s",strtotime("-".$days." days"))."'");
-            Db::execute("OPTIMIZE TABLE `".config('database.connections.mysql.prefix')."dmlog`");
-            return json(['code'=>0, 'msg'=>'清理成功']);
+            if (!$days || $days < 0) return json(['code' => -1, 'msg' => '参数错误']);
+            Db::execute("DELETE FROM `" . config('database.connections.mysql.prefix') . "dmlog` WHERE `date`<'" . date("Y-m-d H:i:s", strtotime("-" . $days . " days")) . "'");
+            Db::execute("OPTIMIZE TABLE `" . config('database.connections.mysql.prefix') . "dmlog`");
+            return json(['code' => 0, 'msg' => '清理成功']);
         }
     }
 
     public function status()
     {
         $run_time = config_get('run_time', null, true);
-        $run_state = $run_time ? (time()-strtotime($run_time) > 10 ? 0 : 1) : 0;
+        $run_state = $run_time ? (time() - strtotime($run_time) > 10 ? 0 : 1) : 0;
         return $run_state == 1 ? 'ok' : 'error';
     }
-}
+}

app/controller/Index.php

@@ -1,4 +1,5 @@
 <?php
+
 namespace app\controller;
 
 use app\BaseController;
@@ -7,32 +8,35 @@ use think\facade\Db;
 use think\facade\View;
 use think\facade\Cache;
 use app\lib\DnsHelper;
+use app\utils\MsgNotice;
 
 class Index extends BaseController
 {
     public function index()
     {
-        if(request()->user['type'] == 'domain'){
-            return redirect('/record/'.request()->user['id']);
+        if ($this->request->user['type'] == 'domain') {
+            return redirect('/record/' . $this->request->user['id']);
         }
-        if(request()->isAjax()){
-            if(input('post.do') == 'stat'){
-                $stat = ['domains'=>0, 'users'=>0, 'records'=>0, 'types'=>count(DnsHelper::$dns_config)];
-                if(request()->user['level'] == 2){
+        if ($this->request->isAjax()) {
+            if (input('post.do') == 'stat') {
+                $stat = ['domains' => 0, 'tasks' => 0, 'certs' => 0, 'deploys' => 0];
+                if ($this->request->user['level'] == 2) {
                     $stat['domains'] = Db::name('domain')->count();
-                    $stat['users'] = Db::name('user')->count();
-                    $stat['records'] = Db::name('domain')->sum('recordcount');
-                }else{
-                    $stat['domains'] = Db::name('domain')->where('name', 'in', request()->user['permission'])->count();
-                    $stat['users'] = 1;
-                    $stat['records'] = Db::name('domain')->where('name', 'in', request()->user['permission'])->sum('recordcount');
+                    $stat['tasks'] = Db::name('dmtask')->count();
+                    $stat['certs'] = Db::name('cert_order')->count();
+                    $stat['deploys'] = Db::name('cert_deploy')->count();
+                } else {
+                    $stat['domains'] = Db::name('domain')->where('name', 'in', $this->request->user['permission'])->count();
+                    $stat['tasks'] = Db::name('dmtask')->count();
+                    $stat['certs'] = Db::name('cert_order')->count();
+                    $stat['deploys'] = Db::name('cert_deploy')->count();
                 }
                 return json($stat);
             }
-            return json(['code'=>-3]);
+            return json(['code' => -3]);
         }
 
-        if(config('app.dbversion') && config_get('version') != config('app.dbversion')){
+        if (config('app.dbversion') && config_get('version') != config('app.dbversion')) {
             $this->db_update();
             config_set('version', config('app.dbversion'));
             Cache::clear();
@@ -49,70 +53,116 @@ class Index extends BaseController
             'date' => date("Y-m-d H:i:s"),
         ];
         View::assign('info', $info);
-        View::assign('checkupdate', '//auth.cccyun.cc/app/dnsmgr.php?ver='.config('app.version'));
+        View::assign('checkupdate', '//auth.cccyun.cc/app/dnsmgr.php?ver=' . config('app.version'));
         return view();
     }
 
-    private function db_update(){
-        $sqls=file_get_contents(app()->getAppPath().'sql/update.sql');
+    private function db_update()
+    {
+        $sqls = file_get_contents(app()->getAppPath() . 'sql/update.sql');
         $mysql_prefix = env('database.prefix', 'dnsmgr_');
-        $sqls=explode(';', $sqls);
+        $sqls = explode(';', $sqls);
         foreach ($sqls as $value) {
-            $value=trim($value);
-            if(empty($value))continue;
-            $value = str_replace('dnsmgr_',$mysql_prefix,$value);
-            Db::execute($value);
+            $value = trim($value);
+            if (empty($value)) continue;
+            $value = str_replace('dnsmgr_', $mysql_prefix, $value);
+            try {
+                Db::execute($value);
+            } catch (Exception $e) {
+            }
         }
     }
 
-    public function changeskin(){
+    public function changeskin()
+    {
         $skin = input('post.skin');
-        if(request()->user['level'] == 2){
-            if(cookie('admin_skin')){
+        if ($this->request->user['level'] == 2) {
+            if (cookie('admin_skin')) {
                 cookie('admin_skin', null);
             }
             config_set('admin_skin', $skin);
             Cache::delete('configs');
-        }else{
+        } else {
             cookie('admin_skin', $skin);
         }
-        return json(['code'=>0,'msg'=>'succ']);
+        return json(['code' => 0, 'msg' => 'succ']);
     }
 
-    public function cleancache(){
-        if(!checkPermission(1)) return $this->alert('error', '无权限');
+    public function cleancache()
+    {
+        if (!checkPermission(1)) return $this->alert('error', '无权限');
         Cache::clear();
-        return json(['code'=>0,'msg'=>'succ']);
+        clearDirectory(app()->getRuntimePath().'cache/');
+        clearDirectory(app()->getRuntimePath().'temp/');
+        return json(['code' => 0, 'msg' => 'succ']);
     }
 
-    public function doc(){
-        if(!checkPermission(1)) return $this->alert('error', '无权限');
-        View::assign('siteurl', request()->root(true));
+    public function doc()
+    {
+        if (!checkPermission(1)) return $this->alert('error', '无权限');
+        View::assign('siteurl', $this->request->root(true));
         return view();
     }
 
-    public function setpwd(){
-        if(!checkPermission(1)) return $this->alert('error', '无权限');
-        if(request()->isPost()){
+    public function setpwd()
+    {
+        if (!checkPermission(1)) return $this->alert('error', '无权限');
+        if ($this->request->isPost()) {
             $oldpwd = input('post.oldpwd');
             $newpwd = input('post.newpwd');
             $newpwd2 = input('post.newpwd2');
-            if(empty($oldpwd) || empty($newpwd) || empty($newpwd2)){
-                return json(['code'=>-1, 'msg'=>'密码不能为空']);
+            if (empty($oldpwd) || empty($newpwd) || empty($newpwd2)) {
+                return json(['code' => -1, 'msg' => '密码不能为空']);
             }
-            if($newpwd != $newpwd2){
-                return json(['code'=>-1, 'msg'=>'两次输入的密码不一致']);
+            if ($newpwd != $newpwd2) {
+                return json(['code' => -1, 'msg' => '两次输入的密码不一致']);
             }
-            if(!password_verify($oldpwd, request()->user['password'])){
-                return json(['code'=>-1, 'msg'=>'原密码错误']);
+            if (!password_verify($oldpwd, $this->request->user['password'])) {
+                return json(['code' => -1, 'msg' => '原密码错误']);
             }
-            Db::name('user')->where('id', request()->user['id'])->update(['password'=>password_hash($newpwd, PASSWORD_DEFAULT)]);
-            return json(['code'=>0, 'msg'=>'succ']);
+            Db::name('user')->where('id', $this->request->user['id'])->update(['password' => password_hash($newpwd, PASSWORD_DEFAULT)]);
+            return json(['code' => 0, 'msg' => 'succ']);
         }
+        View::assign('user', $this->request->user);
         return view();
     }
 
-    public function test(){
+    public function totp()
+    {
+        if (!checkPermission(1)) return $this->alert('error', '无权限');
+        $action = input('param.action');
+        if ($action == 'generate') {
+            try {
+                $totp = \app\lib\TOTP::create();
+                $totp->setLabel($this->request->user['username']);
+                $totp->setIssuer('DNS Manager');
+                return json(['code' => 0, 'data' => ['secret' => $totp->getSecret(), 'qrcode' => $totp->getProvisioningUri()]]);
+            } catch (Exception $e) {
+                return json(['code' => -1, 'msg' => $e->getMessage()]);
+            }
+        } elseif ($action == 'bind') {
+            $secret = input('post.secret');
+            $code = input('post.code');
+            if (empty($secret)) return json(['code' => -1, 'msg' => '密钥不能为空']);
+            if (empty($code)) return json(['code' => -1, 'msg' => '请输入动态口令']);
+            try {
+                $totp = \app\lib\TOTP::create($secret);
+                if (!$totp->verify($code)) {
+                    return json(['code' => -1, 'msg' => '动态口令错误']);
+                }
+            } catch (Exception $e) {
+                return json(['code' => -1, 'msg' => $e->getMessage()]);
+            }
+            Db::name('user')->where('id', $this->request->user['id'])->update(['totp_open' => 1, 'totp_secret' => $secret]);
+            return json(['code' => 0, 'msg' => 'succ']);
+        } elseif ($action == 'close') {
+            Db::name('user')->where('id', $this->request->user['id'])->update(['totp_open' => 0, 'totp_secret' => null]);
+            return json(['code' => 0, 'msg' => 'succ']);
+        }
+    }
+
+    public function test()
+    {
 
     }
 }

app/controller/Install.php

@@ -1,20 +1,21 @@
 <?php
+
 namespace app\controller;
 
 use PDO;
 use Exception;
 use app\BaseController;
-use think\facade\View;
 use think\facade\Cache;
+use think\facade\Request;
 
 class Install extends BaseController
 {
     public function index()
     {
-        if (file_exists(app()->getRootPath().'.env')){
+        if (file_exists(app()->getRootPath() . '.env')) {
             return '当前已经安装成功，如果需要重新安装，请手动删除根目录.env文件';
         }
-        if(request()->isPost()){
+        if (Request::isPost()) {
             $mysql_host = input('post.mysql_host', null, 'trim');
             $mysql_port = intval(input('post.mysql_port', '3306'));
             $mysql_user = input('post.mysql_user', null, 'trim');
@@ -24,61 +25,64 @@ class Install extends BaseController
             $admin_username = input('post.admin_username', null, 'trim');
             $admin_password = input('post.admin_password', null, 'trim');
 
-            if(!$mysql_host || !$mysql_user || !$mysql_pwd || !$mysql_name || !$admin_username || !$admin_password){
-                return json(['code'=>0, 'msg'=>'必填项不能为空']);
+            if (!$mysql_host || !$mysql_user || !$mysql_pwd || !$mysql_name || !$admin_username || !$admin_password) {
+                return json(['code' => 0, 'msg' => '必填项不能为空']);
             }
 
-            $configdata = file_get_contents(app()->getRootPath().'.example.env');
-            $configdata = str_replace(['{syskey}','{dbhost}','{dbname}','{dbuser}','{dbpwd}','{dbport}','{dbprefix}'], [random(16), $mysql_host, $mysql_name, $mysql_user, $mysql_pwd, $mysql_port, $mysql_prefix], $configdata);
+            $configData = file_get_contents(app()->getRootPath() . '.example.env');
+            $configData = str_replace(['{dbhost}', '{dbname}', '{dbuser}', '{dbpwd}', '{dbport}', '{dbprefix}'], [$mysql_host, $mysql_name, $mysql_user, $mysql_pwd, $mysql_port, $mysql_prefix], $configData);
 
-            try{
-                $DB=new PDO("mysql:host=".$mysql_host.";dbname=".$mysql_name.";port=".$mysql_port,$mysql_user,$mysql_pwd);
-            }catch(Exception $e){
-                if($e->getCode() == 2002){
-                    $errorMsg='连接数据库失败：数据库地址填写错误！';
-                }elseif($e->getCode() == 1045){
-                    $errorMsg='连接数据库失败：数据库用户名或密码填写错误！';
-                }elseif($e->getCode() == 1049){
-                    $errorMsg='连接数据库失败：数据库名不存在！';
-                }else{
-                    $errorMsg='连接数据库失败：'.$e->getMessage();
+            try {
+                $DB = new PDO("mysql:host=" . $mysql_host . ";dbname=" . $mysql_name . ";port=" . $mysql_port, $mysql_user, $mysql_pwd);
+            } catch (Exception $e) {
+                if ($e->getCode() == 2002) {
+                    $errorMsg = '连接数据库失败：数据库地址填写错误！';
+                } elseif ($e->getCode() == 1045) {
+                    $errorMsg = '连接数据库失败：数据库用户名或密码填写错误！';
+                } elseif ($e->getCode() == 1049) {
+                    $errorMsg = '连接数据库失败：数据库名不存在！';
+                } else {
+                    $errorMsg = '连接数据库失败：' . $e->getMessage();
                 }
-                return json(['code'=>0, 'msg'=>$errorMsg]);
+                return json(['code' => 0, 'msg' => $errorMsg]);
             }
             $DB->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_SILENT);
             $DB->exec("set sql_mode = ''");
             $DB->exec("set names utf8");
 
-            $sqls=file_get_contents(app()->getAppPath().'sql/install.sql');
-            $sqls=explode(';', $sqls);
+            $sqls = file_get_contents(app()->getAppPath() . 'sql/install.sql');
+            $sqls = explode(';', $sqls);
 
             $password = password_hash($admin_password, PASSWORD_DEFAULT);
-            $sqls[]="INSERT INTO `".$mysql_prefix."user` (`username`,`password`,`level`,`regtime`,`lasttime`,`status`) VALUES ('".addslashes($admin_username)."', '$password', 2, NOW(), NOW(), 1)";
+            $sqls[] = "REPLACE INTO `" . $mysql_prefix . "config` VALUES ('sys_key', '" . random(16) . "')";
+            $sqls[] = "INSERT INTO `" . $mysql_prefix . "user` (`username`,`password`,`level`,`regtime`,`lasttime`,`status`) VALUES ('" . addslashes($admin_username) . "', '$password', 2, NOW(), NOW(), 1)";
 
-            $success=0;$error=0;$errorMsg=null;
+            $success = 0;
+            $error = 0;
+            $errorMsg = null;
             foreach ($sqls as $value) {
-                $value=trim($value);
-                if(empty($value))continue;
-                $value = str_replace('dnsmgr_',$mysql_prefix,$value);
-                if($DB->exec($value)===false){
+                $value = trim($value);
+                if (empty($value)) continue;
+                $value = str_replace('dnsmgr_', $mysql_prefix, $value);
+                if ($DB->exec($value) === false) {
                     $error++;
-                    $dberror=$DB->errorInfo();
-                    $errorMsg.=$dberror[2]."\n";
-                }else{
+                    $dberror = $DB->errorInfo();
+                    $errorMsg .= $dberror[2] . "\n";
+                } else {
                     $success++;
                 }
             }
-            if(empty($errorMsg)){
-                if(!file_put_contents(app()->getRootPath().'.env', $configdata)){
-                    return json(['code'=>0, 'msg'=>'保存失败，请确保网站根目录有写入权限']);
+            if (empty($errorMsg)) {
+                if (!file_put_contents(app()->getRootPath() . '.env', $configData)) {
+                    return json(['code' => 0, 'msg' => '保存失败，请确保网站根目录有写入权限']);
                 }
                 Cache::clear();
-                return json(['code'=>1, 'msg'=>'安装完成！成功执行SQL语句'.$success.'条']);
-            }else{
-                return json(['code'=>0, 'msg'=>$errorMsg]);
+                return json(['code' => 1, 'msg' => '安装完成！成功执行SQL语句' . $success . '条']);
+            } else {
+                return json(['code' => 0, 'msg' => $errorMsg]);
             }
         }
         return view();
     }
-    
+
 }

app/controller/Optimizeip.php

@@ -1,4 +1,5 @@
 <?php
+
 namespace app\controller;
 
 use app\BaseController;
@@ -6,60 +7,61 @@ use Exception;
 use think\facade\Db;
 use think\facade\View;
 use think\facade\Cache;
-use app\lib\OptimizeService;
+use app\service\OptimizeService;
 
 class Optimizeip extends BaseController
 {
     public function opipset()
     {
-        if(!checkPermission(2)) return $this->alert('error', '无权限');
-        if(request()->isPost()){
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        if ($this->request->isPost()) {
             $params = input('post.');
-            foreach ($params as $key=>$value){
+            foreach ($params as $key => $value) {
                 if (empty($key)) {
                     continue;
                 }
                 config_set($key, $value);
                 Cache::delete('configs');
             }
-            return json(['code'=>0, 'msg'=>'succ']);
+            return json(['code' => 0, 'msg' => 'succ']);
         }
         return View::fetch();
     }
 
     public function opiplist()
     {
-        if(!checkPermission(2)) return $this->alert('error', '无权限');
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
         return View::fetch();
     }
 
-    public function opiplist_data(){
-        if(!checkPermission(2)) return json(['total'=>0, 'rows'=>[]]);
+    public function opiplist_data()
+    {
+        if (!checkPermission(2)) return json(['total' => 0, 'rows' => []]);
         $type = input('post.type/d', 1);
         $kw = input('post.kw', null, 'trim');
         $offset = input('post.offset/d');
         $limit = input('post.limit/d');
 
-        $select = Db::name('optimizeip')->alias('A')->join('domain B','A.did = B.id');
-        if(!empty($kw)){
-            if($type == 1){
-                $select->whereLike('rr|B.name', '%'.$kw.'%');
-            }elseif($type == 2){
-                $select->whereLike('remark', '%'.$kw.'%');
+        $select = Db::name('optimizeip')->alias('A')->join('domain B', 'A.did = B.id');
+        if (!empty($kw)) {
+            if ($type == 1) {
+                $select->whereLike('rr|B.name', '%' . $kw . '%');
+            } elseif ($type == 2) {
+                $select->whereLike('remark', '%' . $kw . '%');
             }
         }
         $total = $select->count();
-        $list = $select->order('A.id','desc')->limit($offset, $limit)->field('A.*,B.name domain')->select();
+        $list = $select->order('A.id', 'desc')->limit($offset, $limit)->field('A.*,B.name domain')->select();
 
-        return json(['total'=>$total, 'rows'=>$list]);
+        return json(['total' => $total, 'rows' => $list]);
     }
 
     public function opipform()
     {
-        if(!checkPermission(2)) return $this->alert('error', '无权限');
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
         $action = input('param.action');
-        if(request()->isPost()){
-            if($action == 'add'){
+        if ($this->request->isPost()) {
+            if ($action == 'add') {
                 $task = [
                     'did' => input('post.did/d'),
                     'rr' => input('post.rr', null, 'trim'),
@@ -69,22 +71,22 @@ class Optimizeip extends BaseController
                     'recordnum' => input('post.recordnum/d'),
                     'ttl' => input('post.ttl/d'),
                     'remark' => input('post.remark', null, 'trim'),
-                    'addtime' => time(),
+                    'addtime' => date('Y-m-d H:i:s'),
                     'active' => 1
                 ];
-    
-                if(empty($task['did']) || empty($task['rr']) || empty($task['ip_type']) || empty($task['recordnum']) || empty($task['ttl'])){
-                    return json(['code'=>-1, 'msg'=>'必填项不能为空']);
+
+                if (empty($task['did']) || empty($task['rr']) || empty($task['ip_type']) || empty($task['recordnum']) || empty($task['ttl'])) {
+                    return json(['code' => -1, 'msg' => '必填项不能为空']);
                 }
-                if($task['recordnum'] > 5){
-                    return json(['code'=>-1, 'msg'=>'解析数量不能超过5个']);
+                if ($task['recordnum'] > 5) {
+                    return json(['code' => -1, 'msg' => '解析数量不能超过5个']);
                 }
-                if(Db::name('optimizeip')->where('did', $task['did'])->where('rr', $task['rr'])->find()){
-                    return json(['code'=>-1, 'msg'=>'当前域名的优选IP任务已存在']);
+                if (Db::name('optimizeip')->where('did', $task['did'])->where('rr', $task['rr'])->find()) {
+                    return json(['code' => -1, 'msg' => '当前域名的优选IP任务已存在']);
                 }
                 Db::name('optimizeip')->insert($task);
-                return json(['code'=>0, 'msg'=>'添加成功']);
-            }elseif($action == 'edit'){
+                return json(['code' => 0, 'msg' => '添加成功']);
+            } elseif ($action == 'edit') {
                 $id = input('post.id/d');
                 $task = [
                     'did' => input('post.did/d'),
@@ -96,52 +98,52 @@ class Optimizeip extends BaseController
                     'ttl' => input('post.ttl/d'),
                     'remark' => input('post.remark', null, 'trim'),
                 ];
-    
-                if(empty($task['did']) || empty($task['rr']) || empty($task['ip_type']) || empty($task['recordnum']) || empty($task['ttl'])){
-                    return json(['code'=>-1, 'msg'=>'必填项不能为空']);
+
+                if (empty($task['did']) || empty($task['rr']) || empty($task['ip_type']) || empty($task['recordnum']) || empty($task['ttl'])) {
+                    return json(['code' => -1, 'msg' => '必填项不能为空']);
                 }
-                if($task['recordnum'] > 5){
-                    return json(['code'=>-1, 'msg'=>'解析数量不能超过5个']);
+                if ($task['recordnum'] > 5) {
+                    return json(['code' => -1, 'msg' => '解析数量不能超过5个']);
                 }
-                if(Db::name('optimizeip')->where('did', $task['did'])->where('rr', $task['rr'])->where('id', '<>', $id)->find()){
-                    return json(['code'=>-1, 'msg'=>'当前域名的优选IP任务已存在']);
+                if (Db::name('optimizeip')->where('did', $task['did'])->where('rr', $task['rr'])->where('id', '<>', $id)->find()) {
+                    return json(['code' => -1, 'msg' => '当前域名的优选IP任务已存在']);
                 }
                 Db::name('optimizeip')->where('id', $id)->update($task);
-                return json(['code'=>0, 'msg'=>'修改成功']);
-            }elseif($action == 'setactive'){
+                return json(['code' => 0, 'msg' => '修改成功']);
+            } elseif ($action == 'setactive') {
                 $id = input('post.id/d');
                 $active = input('post.active/d');
-                Db::name('optimizeip')->where('id', $id)->update(['active'=>$active]);
-                return json(['code'=>0, 'msg'=>'设置成功']);
-            }elseif($action == 'del'){
+                Db::name('optimizeip')->where('id', $id)->update(['active' => $active]);
+                return json(['code' => 0, 'msg' => '设置成功']);
+            } elseif ($action == 'del') {
                 $id = input('post.id/d');
                 Db::name('optimizeip')->where('id', $id)->delete();
-                return json(['code'=>0, 'msg'=>'删除成功']);
-            }elseif($action == 'run'){
+                return json(['code' => 0, 'msg' => '删除成功']);
+            } elseif ($action == 'run') {
                 $id = input('post.id/d');
                 $task = Db::name('optimizeip')->where('id', $id)->find();
-                if(empty($task)) return json(['code'=>-1, 'msg'=>'任务不存在']);
-                try{
+                if (empty($task)) return json(['code' => -1, 'msg' => '任务不存在']);
+                try {
                     $result = (new OptimizeService())->execute_one($task);
                     Db::name('optimizeip')->where('id', $id)->update(['status' => 1, 'errmsg' => null, 'updatetime' => date('Y-m-d H:i:s')]);
-                    return json(['code'=>0, 'msg'=>'优选任务执行成功：'.$result]);
-                }catch(Exception $e){
+                    return json(['code' => 0, 'msg' => '优选任务执行成功：' . $result]);
+                } catch (Exception $e) {
                     Db::name('optimizeip')->where('id', $id)->update(['status' => 2, 'errmsg' => $e->getMessage(), 'updatetime' => date('Y-m-d H:i:s')]);
-                    return json(['code'=>-1, 'msg'=>'优选任务执行失败：'.$e->getMessage(), 'stack'=>$e->__toString()]);
+                    return json(['code' => -1, 'msg' => '优选任务执行失败：' . $e->getMessage(), 'stack' => $e->__toString()]);
                 }
-            }else{
-                return json(['code'=>-1, 'msg'=>'参数错误']);
+            } else {
+                return json(['code' => -1, 'msg' => '参数错误']);
             }
         }
         $task = null;
-        if($action == 'edit'){
+        if ($action == 'edit') {
             $id = input('get.id/d');
             $task = Db::name('optimizeip')->where('id', $id)->find();
-            if(empty($task)) return $this->alert('error', '任务不存在');
+            if (empty($task)) return $this->alert('error', '任务不存在');
         }
 
         $domains = [];
-        foreach(Db::name('domain')->alias('A')->join('account B','A.aid = B.id')->field('A.*')->where('B.type', '<>', 'cloudflare')->select() as $row){
+        foreach (Db::name('domain')->alias('A')->join('account B', 'A.aid = B.id')->field('A.*')->where('B.type', '<>', 'cloudflare')->select() as $row) {
             $domains[$row['id']] = $row['name'];
         }
         View::assign('domains', $domains);
@@ -153,22 +155,22 @@ class Optimizeip extends BaseController
 
     public function queryapi()
     {
-        if(!checkPermission(2)) return $this->alert('error', '无权限');
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
         $optimize_ip_api = input('post.optimize_ip_api/d');
         $optimize_ip_key = input('post.optimize_ip_key', null, 'trim');
-        if(empty($optimize_ip_key)) return json(['code'=>-1, 'msg'=>'参数不能为空']);
-        try{
+        if (empty($optimize_ip_key)) return json(['code' => -1, 'msg' => '参数不能为空']);
+        try {
             $result = (new OptimizeService())->get_license($optimize_ip_api, $optimize_ip_key);
-            return json(['code'=>0, 'msg'=>'当前积分余额：'.$result]);
-        }catch(Exception $e){
-            return json(['code'=>-1, 'msg'=>$e->getMessage()]);
+            return json(['code' => 0, 'msg' => '当前积分余额：' . $result]);
+        } catch (Exception $e) {
+            return json(['code' => -1, 'msg' => $e->getMessage()]);
         }
     }
 
     public function status()
     {
         $run_time = Db::name('optimizeip')->where('active', 1)->order('updatetime', 'desc')->value('updatetime');
-        $run_state = $run_time ? (time()-strtotime($run_time) > 3600 ? 0 : 1) : 0;
+        $run_state = $run_time ? (time() - strtotime($run_time) > 3600 ? 0 : 1) : 0;
         return $run_state == 1 ? 'ok' : 'error';
     }
-}
+}

app/controller/System.php

@@ -0,0 +1,112 @@
+<?php
+
+namespace app\controller;
+
+use app\BaseController;
+use Exception;
+use think\facade\Db;
+use think\facade\View;
+use think\facade\Cache;
+
+class System extends BaseController
+{
+    public function noticeset()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        if ($this->request->isPost()) {
+            $params = input('post.');
+            if (isset($params['mail_type']) && isset($params['mail_name2']) && $params['mail_type'] > 0) {
+                $params['mail_name'] = $params['mail_name2'];
+                unset($params['mail_name2']);
+            }
+            foreach ($params as $key => $value) {
+                if (empty($key)) {
+                    continue;
+                }
+                config_set($key, $value);
+                Cache::delete('configs');
+            }
+            return json(['code' => 0, 'msg' => 'succ']);
+        }
+        return View::fetch();
+    }
+
+    public function proxyset()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        if ($this->request->isPost()) {
+            $params = input('post.');
+            foreach ($params as $key => $value) {
+                if (empty($key)) {
+                    continue;
+                }
+                config_set($key, $value);
+                Cache::delete('configs');
+            }
+            return json(['code' => 0, 'msg' => 'succ']);
+        }
+        return View::fetch();
+    }
+
+    public function mailtest()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        $mail_name = config_get('mail_recv') ? config_get('mail_recv') : config_get('mail_name');
+        if (empty($mail_name)) return json(['code' => -1, 'msg' => '您还未设置邮箱！']);
+        $result = \app\utils\MsgNotice::send_mail($mail_name, '邮件发送测试。', '这是一封测试邮件！<br/><br/>来自：' . $this->request->root(true));
+        if ($result === true) {
+            return json(['code' => 0, 'msg' => '邮件发送成功！']);
+        } else {
+            return json(['code' => -1, 'msg' => '邮件发送失败！' . $result]);
+        }
+    }
+
+    public function tgbottest()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        $tgbot_token = config_get('tgbot_token');
+        $tgbot_chatid = config_get('tgbot_chatid');
+        if (empty($tgbot_token) || empty($tgbot_chatid)) return json(['code' => -1, 'msg' => '请先保存设置']);
+        $content = "<strong>消息发送测试</strong>\n\n这是一封测试消息！\n\n来自：" . $this->request->root(true);
+        $result = \app\utils\MsgNotice::send_telegram_bot($content);
+        if ($result === true) {
+            return json(['code' => 0, 'msg' => '消息发送成功！']);
+        } else {
+            return json(['code' => -1, 'msg' => '消息发送失败！' . $result]);
+        }
+    }
+
+    public function webhooktest()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        $webhook_url = config_get('webhook_url');
+        if (empty($webhook_url)) return json(['code' => -1, 'msg' => '请先保存设置']);
+        $content = "这是一封测试消息！\n来自：" . $this->request->root(true);
+        $result = \app\utils\MsgNotice::send_webhook('消息发送测试', $content);
+        if ($result === true) {
+            return json(['code' => 0, 'msg' => '消息发送成功！']);
+        } else {
+            return json(['code' => -1, 'msg' => '消息发送失败！' . $result]);
+        }
+    }
+
+    public function proxytest()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
+        $proxy_server = trim($_POST['proxy_server']);
+        $proxy_port = $_POST['proxy_port'];
+        $proxy_user = trim($_POST['proxy_user']);
+        $proxy_pwd = trim($_POST['proxy_pwd']);
+        $proxy_type = $_POST['proxy_type'];
+        try {
+            check_proxy('https://dl.amh.sh/ip.htm', $proxy_server, $proxy_port, $proxy_type, $proxy_user, $proxy_pwd);
+        } catch (Exception $e) {
+            try {
+                check_proxy('https://myip.ipip.net/', $proxy_server, $proxy_port, $proxy_type, $proxy_user, $proxy_pwd);
+            } catch (Exception $e) {
+                return json(['code' => -1, 'msg' => $e->getMessage()]);
+            }
+        }
+        return json(['code' => 0]);
+    }
+}

app/controller/User.php

@@ -9,53 +9,62 @@ use think\facade\Request;
 
 class User extends BaseController
 {
-    
-    public function user(){
-        if(!checkPermission(2)) return $this->alert('error', '无权限');
+
+    public function user()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
         $list = Db::name('domain')->select();
         $domains = [];
-        foreach($list as $row){
+        foreach ($list as $row) {
             $domains[] = $row['name'];
         }
         View::assign('domains', $domains);
         return view();
     }
 
-    public function user_data(){
-        if(!checkPermission(2)) return json(['total'=>0, 'rows'=>[]]);
+    public function user_data()
+    {
+        if (!checkPermission(2)) return json(['total' => 0, 'rows' => []]);
         $kw = input('post.kw', null, 'trim');
         $offset = input('post.offset/d');
         $limit = input('post.limit/d');
 
         $select = Db::name('user');
-        if(!empty($kw)){
+        if (!empty($kw)) {
             $select->whereLike('id|username', $kw);
         }
         $total = $select->count();
-        $rows = $select->order('id','desc')->limit($offset, $limit)->select();
+        $rows = $select->order('id', 'desc')->limit($offset, $limit)->select();
 
-        return json(['total'=>$total, 'rows'=>$rows]);
+        return json(['total' => $total, 'rows' => $rows]);
     }
 
-    public function user_op(){
-        if(!checkPermission(2)) return $this->alert('error', '无权限');
+    public function user_op()
+    {
+        if (!checkPermission(2)) return $this->alert('error', '无权限');
         $act = input('param.act');
-        if($act == 'get'){
+        if ($act == 'get') {
             $id = input('post.id/d');
             $row = Db::name('user')->where('id', $id)->find();
-            if(!$row) return json(['code'=>-1, 'msg'=>'用户不存在']);
+            if (!$row) {
+                return json(['code' => -1, 'msg' => '用户不存在']);
+            }
             $row['permission'] = Db::name('permission')->where('uid', $id)->column('domain');
-            return json(['code'=>0, 'data'=>$row]);
-        }elseif($act == 'add'){
+            return json(['code' => 0, 'data' => $row]);
+        } elseif ($act == 'add') {
             $username = input('post.username', null, 'trim');
             $password = input('post.password', null, 'trim');
             $is_api = input('post.is_api/d');
             $apikey = input('post.apikey', null, 'trim');
             $level = input('post.level/d');
-            if(empty($username) || empty($password)) return json(['code'=>-1, 'msg'=>'用户名或密码不能为空']);
-            if($is_api ==1 && empty($apikey)) return json(['code'=>-1, 'msg'=>'API密钥不能为空']);
-            if(Db::name('user')->where('username', $username)->find()){
-                return json(['code'=>-1, 'msg'=>'用户名已存在']);
+            if (empty($username) || empty($password)) {
+                return json(['code' => -1, 'msg' => '用户名或密码不能为空']);
+            }
+            if ($is_api == 1 && empty($apikey)) {
+                return json(['code' => -1, 'msg' => 'API密钥不能为空']);
+            }
+            if (Db::name('user')->where('username', $username)->find()) {
+                return json(['code' => -1, 'msg' => '用户名已存在']);
             }
             $uid = Db::name('user')->insertGetId([
                 'username' => $username,
@@ -66,75 +75,91 @@ class User extends BaseController
                 'regtime' => date('Y-m-d H:i:s'),
                 'status' => 1,
             ]);
-            if($level == 1){
+            if ($level == 1) {
                 $permission = input('post.permission/a');
-                if(!empty($permission)){
+                if (!empty($permission)) {
                     $data = [];
-                    foreach($permission as $domain){
-                        $data[] = ['uid'=>$uid, 'domain'=>$domain];
+                    foreach ($permission as $domain) {
+                        $data[] = ['uid' => $uid, 'domain' => $domain];
                     }
                     Db::name('permission')->insertAll($data);
                 }
             }
-            return json(['code'=>0, 'msg'=>'添加用户成功！']);
-        }elseif($act == 'edit'){
+            return json(['code' => 0, 'msg' => '添加用户成功！']);
+        } elseif ($act == 'edit') {
             $id = input('post.id/d');
             $row = Db::name('user')->where('id', $id)->find();
-            if(!$row) return json(['code'=>-1, 'msg'=>'用户不存在']);
+            if (!$row) return json(['code' => -1, 'msg' => '用户不存在']);
             $username = input('post.username', null, 'trim');
             $is_api = input('post.is_api/d');
             $apikey = input('post.apikey', null, 'trim');
             $level = input('post.level/d');
             $repwd = input('post.repwd', null, 'trim');
-            if(empty($username)) return json(['code'=>-1, 'msg'=>'用户名不能为空']);
-            if($is_api ==1 && empty($apikey)) return json(['code'=>-1, 'msg'=>'API密钥不能为空']);
-            if(Db::name('user')->where('username', $username)->where('id', '<>', $id)->find()){
-                return json(['code'=>-1, 'msg'=>'用户名已存在']);
+            if (empty($username)) {
+                return json(['code' => -1, 'msg' => '用户名不能为空']);
+            }
+            if ($is_api == 1 && empty($apikey)) {
+                return json(['code' => -1, 'msg' => 'API密钥不能为空']);
+            }
+            if (Db::name('user')->where('username', $username)->where('id', '<>', $id)->find()) {
+                return json(['code' => -1, 'msg' => '用户名已存在']);
+            }
+            if ($level == 1 && ($id == 1000 || $id == $this->request->user['id'])) {
+                $level = 2;
             }
-            if($level == 1 && ($id == 1000 || $id == request()->user['id'])) $level = 2;
             Db::name('user')->where('id', $id)->update([
                 'username' => $username,
                 'is_api' => $is_api,
                 'apikey' => $apikey,
                 'level' => $level,
             ]);
-            Db::name('permission')->where(['uid'=>$id])->delete();
-            if($level == 1){
+            Db::name('permission')->where(['uid' => $id])->delete();
+            if ($level == 1) {
                 $permission = input('post.permission/a');
-                if(!empty($permission)){
+                if (!empty($permission)) {
                     $data = [];
-                    foreach($permission as $domain){
-                        $data[] = ['uid'=>$id, 'domain'=>$domain];
+                    foreach ($permission as $domain) {
+                        $data[] = ['uid' => $id, 'domain' => $domain];
                     }
                     Db::name('permission')->insertAll($data);
                 }
             }
-            if(!empty($repwd)){
-                Db::name('user')->where('id', $id)->update(['password'=>password_hash($repwd, PASSWORD_DEFAULT)]);
+            if (!empty($repwd)) {
+                Db::name('user')->where('id', $id)->update(['password' => password_hash($repwd, PASSWORD_DEFAULT)]);
             }
-            return json(['code'=>0, 'msg'=>'修改用户成功！']);
-        }elseif($act == 'set'){
+            return json(['code' => 0, 'msg' => '修改用户成功！']);
+        } elseif ($act == 'set') {
             $id = input('post.id/d');
             $status = input('post.status/d');
-            if($id == 1000) return json(['code'=>-1, 'msg'=>'此用户无法修改状态']);
-            if($id == request()->user['id']) return json(['code'=>-1, 'msg'=>'当前登录用户无法修改状态']);
-            Db::name('user')->where('id', $id)->update(['status'=>$status]);
-            return json(['code'=>0]);
-        }elseif($act == 'del'){
+            if ($id == 1000) {
+                return json(['code' => -1, 'msg' => '此用户无法修改状态']);
+            }
+            if ($id == $this->request->user['id']) {
+                return json(['code' => -1, 'msg' => '当前登录用户无法修改状态']);
+            }
+            Db::name('user')->where('id', $id)->update(['status' => $status]);
+            return json(['code' => 0]);
+        } elseif ($act == 'del') {
             $id = input('post.id/d');
-            if($id == 1000) return json(['code'=>-1, 'msg'=>'此用户无法删除']);
-            if($id == request()->user['id']) return json(['code'=>-1, 'msg'=>'当前登录用户无法删除']);
+            if ($id == 1000) {
+                return json(['code' => -1, 'msg' => '此用户无法删除']);
+            }
+            if ($id == $this->request->user['id']) {
+                return json(['code' => -1, 'msg' => '当前登录用户无法删除']);
+            }
             Db::name('user')->where('id', $id)->delete();
-            return json(['code'=>0]);
+            return json(['code' => 0]);
         }
-        return json(['code'=>-3]);
+        return json(['code' => -3]);
     }
 
-    public function log(){
+    public function log()
+    {
         return view();
     }
 
-    public function log_data(){
+    public function log_data()
+    {
         $uid = input('post.uid', null, 'trim');
         $kw = input('post.kw', null, 'trim');
         $domain = input('post.domain', null, 'trim');
@@ -142,23 +167,22 @@ class User extends BaseController
         $limit = input('post.limit/d');
 
         $select = Db::name('log');
-        if(request()->user['type'] == 'domain'){
-            $select->where('domain', request()->user['name']);
-        }elseif(request()->user['level'] == 1){
-            $select->where('uid', request()->user['id']);
-        }elseif(!empty($uid)){
+        if ($this->request->user['type'] == 'domain') {
+            $select->where('domain', $this->request->user['name']);
+        } elseif ($this->request->user['level'] == 1) {
+            $select->where('uid', $this->request->user['id']);
+        } elseif (!empty($uid)) {
             $select->where('uid', $uid);
         }
-        if(!empty($kw)){
-            $select->whereLike('action|data', '%'.$kw.'%');
+        if (!empty($kw)) {
+            $select->whereLike('action|data', '%' . $kw . '%');
         }
-        if(!empty($domain)){
+        if (!empty($domain)) {
             $select->where('domain', $domain);
         }
         $total = $select->count();
-        $rows = $select->order('id','desc')->limit($offset, $limit)->select();
+        $rows = $select->order('id', 'desc')->limit($offset, $limit)->select();
 
-        return json(['total'=>$total, 'rows'=>$rows]);
+        return json(['total' => $total, 'rows' => $rows]);
     }
-
-}
+}

app/lib/CertHelper.php

@@ -0,0 +1,367 @@
+<?php
+
+namespace app\lib;
+
+use think\facade\Db;
+
+class CertHelper
+{
+    public static $cert_config = [
+        'letsencrypt' => [
+            'name' => 'Let\'s Encrypt',
+            'class' => 1,
+            'icon' => 'letsencrypt.ico',
+            'wildcard' => true,
+            'max_domains' => 100,
+            'cname' => true,
+            'note' => null,
+            'inputs' => [
+                'email' => [
+                    'name' => '邮箱地址',
+                    'type' => 'input',
+                    'placeholder' => '用于注册Let\'s Encrypt账号',
+                    'required' => true,
+                ],
+                'mode' => [
+                    'name' => '环境选择',
+                    'type' => 'radio',
+                    'options' => [
+                        'live' => '正式环境',
+                        'staging' => '测试环境',
+                    ],
+                    'value' => 'live'
+                ],
+                'proxy' => [
+                    'name' => '使用代理服务器',
+                    'type' => 'radio',
+                    'options' => [
+                        '0' => '否',
+                        '1' => '是',
+                    ],
+                    'value' => '0'
+                ],
+            ]
+        ],
+        'zerossl' => [
+            'name' => 'ZeroSSL',
+            'class' => 1,
+            'icon' => 'zerossl.ico',
+            'wildcard' => true,
+            'max_domains' => 100,
+            'cname' => true,
+            'note' => '<a href="https://app.zerossl.com/developer" target="_blank" rel="noreferrer">ZeroSSL密钥生成地址</a>',
+            'inputs' => [
+                'email' => [
+                    'name' => '邮箱地址',
+                    'type' => 'input',
+                    'placeholder' => 'EAB申请邮箱',
+                    'required' => true,
+                ],
+                'kid' => [
+                    'name' => 'EAB KID',
+                    'type' => 'input',
+                    'placeholder' => '',
+                    'required' => true,
+                ],
+                'key' => [
+                    'name' => 'EAB HMAC Key',
+                    'type' => 'input',
+                    'placeholder' => '',
+                    'required' => true,
+                ],
+                'proxy' => [
+                    'name' => '使用代理服务器',
+                    'type' => 'radio',
+                    'options' => [
+                        '0' => '否',
+                        '1' => '是',
+                    ],
+                    'value' => '0'
+                ],
+            ]
+        ],
+        'google' => [
+            'name' => 'Google SSL',
+            'class' => 1,
+            'icon' => 'google.ico',
+            'wildcard' => true,
+            'max_domains' => 100,
+            'cname' => true,
+            'note' => '<a href="https://cloud.google.com/certificate-manager/docs/public-ca-tutorial" target="_blank" rel="noreferrer">查看Google SSL账户配置说明</a>',
+            'inputs' => [
+                'email' => [
+                    'name' => '邮箱地址',
+                    'type' => 'input',
+                    'placeholder' => 'EAB申请邮箱',
+                    'required' => true,
+                ],
+                'kid' => [
+                    'name' => 'keyId',
+                    'type' => 'input',
+                    'placeholder' => '',
+                    'required' => true,
+                ],
+                'key' => [
+                    'name' => 'b64MacKey',
+                    'type' => 'input',
+                    'placeholder' => '',
+                    'required' => true,
+                ],
+                'mode' => [
+                    'name' => '环境选择',
+                    'type' => 'radio',
+                    'options' => [
+                        'live' => '正式环境',
+                        'staging' => '测试环境',
+                    ],
+                    'value' => 'live'
+                ],
+                'proxy' => [
+                    'name' => '使用代理服务器',
+                    'type' => 'radio',
+                    'options' => [
+                        '0' => '否',
+                        '1' => '是',
+                    ],
+                    'value' => '0'
+                ],
+            ]
+        ],
+        'tencent' => [
+            'name' => '腾讯云免费SSL',
+            'class' => 2,
+            'icon' => 'tencent.ico',
+            'wildcard' => false,
+            'max_domains' => 1,
+            'cname' => false,
+            'note' => '一个账号有50张免费证书额度，证书到期或吊销可释放额度。<a href="https://cloud.tencent.com/document/product/400/89868" target="_blank" rel="noreferrer">腾讯云免费SSL简介与额度说明</a>',
+            'inputs' => [
+                'SecretId' => [
+                    'name' => 'SecretId',
+                    'type' => 'input',
+                    'placeholder' => '',
+                    'required' => true,
+                ],
+                'SecretKey' => [
+                    'name' => 'SecretKey',
+                    'type' => 'input',
+                    'placeholder' => '',
+                    'required' => true,
+                ],
+                'email' => [
+                    'name' => '邮箱地址',
+                    'type' => 'input',
+                    'placeholder' => '申请证书时填写的邮箱',
+                    'required' => true,
+                ],
+                'proxy' => [
+                    'name' => '使用代理服务器',
+                    'type' => 'radio',
+                    'options' => [
+                        '0' => '否',
+                        '1' => '是',
+                    ],
+                    'value' => '0'
+                ],
+            ]
+        ],
+        'aliyun' => [
+            'name' => '阿里云免费SSL',
+            'class' => 2,
+            'icon' => 'aliyun.ico',
+            'wildcard' => false,
+            'max_domains' => 1,
+            'cname' => false,
+            'note' => '每个自然年有20张免费证书额度，证书到期或吊销不释放额度。需要先进入阿里云控制台-<a href="https://yundun.console.aliyun.com/?p=cas#/certExtend/free/cn-hangzhou" target="_blank" rel="noreferrer">数字证书管理服务</a>，购买个人测试证书资源包。',
+            'inputs' => [
+                'AccessKeyId' => [
+                    'name' => 'AccessKeyId',
+                    'type' => 'input',
+                    'placeholder' => '',
+                    'required' => true,
+                ],
+                'AccessKeySecret' => [
+                    'name' => 'AccessKeySecret',
+                    'type' => 'input',
+                    'placeholder' => '',
+                    'required' => true,
+                ],
+                'username' => [
+                    'name' => '姓名',
+                    'type' => 'input',
+                    'placeholder' => '申请联系人的姓名',
+                    'required' => true,
+                ],
+                'phone' => [
+                    'name' => '手机号码',
+                    'type' => 'input',
+                    'placeholder' => '申请联系人的手机号码',
+                    'required' => true,
+                ],
+                'email' => [
+                    'name' => '邮箱地址',
+                    'type' => 'input',
+                    'placeholder' => '申请联系人的邮箱地址',
+                    'required' => true,
+                ],
+                'proxy' => [
+                    'name' => '使用代理服务器',
+                    'type' => 'radio',
+                    'options' => [
+                        '0' => '否',
+                        '1' => '是',
+                    ],
+                    'value' => '0'
+                ],
+            ]
+        ],
+        'ucloud' => [
+            'name' => 'UCloud免费SSL',
+            'class' => 2,
+            'icon' => 'ucloud.ico',
+            'wildcard' => false,
+            'max_domains' => 1,
+            'cname' => false,
+            'note' => '一个账号有40张免费证书额度，证书到期或吊销可释放额度。',
+            'inputs' => [
+                'PublicKey' => [
+                    'name' => '公钥',
+                    'type' => 'input',
+                    'placeholder' => '',
+                    'required' => true,
+                ],
+                'PrivateKey' => [
+                    'name' => '私钥',
+                    'type' => 'input',
+                    'placeholder' => '',
+                    'required' => true,
+                ],
+                'username' => [
+                    'name' => '姓名',
+                    'type' => 'input',
+                    'placeholder' => '申请联系人的姓名',
+                    'required' => true,
+                ],
+                'phone' => [
+                    'name' => '手机号码',
+                    'type' => 'input',
+                    'placeholder' => '申请联系人的手机号码',
+                    'required' => true,
+                ],
+                'email' => [
+                    'name' => '邮箱地址',
+                    'type' => 'input',
+                    'placeholder' => '申请联系人的邮箱地址',
+                    'required' => true,
+                ],
+            ]
+        ],
+        'customacme' => [
+            'name' => '自定义ACME',
+            'class' => 1,
+            'icon' => 'ssl.ico',
+            'wildcard' => true,
+            'max_domains' => 100,
+            'cname' => true,
+            'note' => null,
+            'inputs' => [
+                'directory' => [
+                    'name' => 'ACME地址',
+                    'type' => 'input',
+                    'placeholder' => 'ACME Directory 地址',
+                    'required' => true,
+                ],
+                'email' => [
+                    'name' => '邮箱地址',
+                    'type' => 'input',
+                    'placeholder' => '证书申请邮箱',
+                    'required' => true,
+                ],
+                'kid' => [
+                    'name' => 'EAB KID',
+                    'type' => 'input',
+                    'placeholder' => '留空则不使用EAB认证',
+                ],
+                'key' => [
+                    'name' => 'EAB HMAC Key',
+                    'type' => 'input',
+                    'placeholder' => '留空则不使用EAB认证',
+                ],
+                'proxy' => [
+                    'name' => '使用代理服务器',
+                    'type' => 'radio',
+                    'options' => [
+                        '0' => '否',
+                        '1' => '是',
+                    ],
+                    'value' => '0'
+                ],
+            ]
+        ],
+    ];
+
+    public static $class_config = [
+        1 => '基于ACME的SSL证书',
+        2 => '云服务商的SSL证书',
+    ];
+
+    public static function getList()
+    {
+        return self::$cert_config;
+    }
+
+    private static function getConfig($aid)
+    {
+        $account = Db::name('cert_account')->where('id', $aid)->find();
+        if (!$account) return false;
+        return $account;
+    }
+
+    public static function getInputs($type, $config = null)
+    {
+        $config = $config ? json_decode($config, true) : [];
+        $inputs = self::$cert_config[$type]['inputs'];
+        foreach ($inputs as &$input) {
+            if (isset($config[$input['name']])) {
+                $input['value'] = $config[$input['name']];
+            }
+        }
+        return $inputs;
+    }
+
+    /**
+     * @return CertInterface|bool
+     */
+    public static function getModel($aid)
+    {
+        $account = self::getConfig($aid);
+        if (!$account) return false;
+        $type = $account['type'];
+        $class = "\\app\\lib\\cert\\{$type}";
+        if (class_exists($class)) {
+            $config = json_decode($account['config'], true);
+            $ext = $account['ext'] ? json_decode($account['ext'], true) : null;
+            $model = new $class($config, $ext);
+            return $model;
+        }
+        return false;
+    }
+
+    /**
+     * @return CertInterface|bool
+     */
+    public static function getModel2($type, $config, $ext = null)
+    {
+        $class = "\\app\\lib\\cert\\{$type}";
+        if (class_exists($class)) {
+            $model = new $class($config, $ext);
+            return $model;
+        }
+        return false;
+    }
+
+    public static function getPfx($fullchain, $privatekey, $pwd = '123456'){
+        openssl_pkcs12_export($fullchain, $pfx, $privatekey, $pwd);
+        return $pfx;
+    }
+}

app/lib/CertInterface.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace app\lib;
+
+interface CertInterface
+{
+    function register();
+
+    function buyCert($domainList, &$order);
+
+    function createOrder($domainList, &$order, $keytype, $keysize);
+
+    function authOrder($domainList, $order);
+
+    function getAuthStatus($domainList, $order);
+
+    function finalizeOrder($domainList, $order, $keytype, $keysize);
+
+    function revoke($order, $pem);
+
+    function cancel($order);
+
+    function setLogger($func);
+}

app/lib/CheckUtils.php

@@ -1,90 +0,0 @@
-<?php
-
-namespace app\lib;
-
-class CheckUtils
-{
-    public static function curl($url, $timeout, $ip = null)
-    {
-        $status = true;
-        $errmsg = null;
-        $urlarr = parse_url($url);
-        if (!empty($ip) && !filter_var($urlarr['host'], FILTER_VALIDATE_IP)) {
-            if (!filter_var($ip, FILTER_VALIDATE_IP)) {
-                $ip = gethostbyname($ip);
-            }
-            if (!empty($ip) && filter_var($ip, FILTER_VALIDATE_IP)) {
-                $port = isset($urlarr['port']) ? $urlarr['port'] : ($urlarr['scheme'] == 'https' ? 443 : 80);
-                $resolve = $urlarr['host'] . ':' . $port . ':' . $ip;
-            }
-        }
-        $ch = curl_init();
-        curl_setopt($ch, CURLOPT_URL, $url);
-        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
-        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
-        $httpheader[] = "Accept: */*";
-        $httpheader[] = "Accept-Language: zh-CN,zh;q=0.8";
-        $httpheader[] = "Connection: close";
-        curl_setopt($ch, CURLOPT_HTTPHEADER, $httpheader);
-        curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36');
-        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
-        curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
-        curl_setopt($ch, CURLOPT_TIMEOUT, $timeout);
-        if(!empty($resolve)){
-            curl_setopt($ch, CURLOPT_DNS_USE_GLOBAL_CACHE, false);
-            curl_setopt($ch, CURLOPT_RESOLVE, [$resolve]);
-        }
-        curl_exec($ch);
-        $errno = curl_errno($ch);
-        if ($errno) {
-            $status = false;
-            $errmsg = curl_error($ch);
-        }
-        $httpcode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
-        if($status && ($httpcode < 200 || $httpcode >= 400)){
-            $status = false;
-            $errmsg = 'http_code='.$httpcode;
-        }
-        $usetime = round(curl_getinfo($ch, CURLINFO_TOTAL_TIME) * 1000);
-        curl_close($ch);
-        return ['status'=>$status, 'errmsg'=>$errmsg, 'usetime'=>$usetime];
-    }
-
-    public static function tcp($target, $port, $timeout){
-        if(!filter_var($target,FILTER_VALIDATE_IP) && checkDomain($target)){
-            $target = gethostbyname($target);
-            if(!$target)return ['status'=>false, 'error'=>'DNS resolve failed', 'usetime'=>0];
-        }
-        $starttime = getMillisecond();
-        $fp = @fsockopen($target, $port, $errCode, $errStr, $timeout);
-        if ($fp) {
-            $status = true;
-            fclose($fp);
-        } else {
-            $status = false;
-        }
-        $endtime = getMillisecond();
-        $usetime = $endtime-$starttime;
-        return ['status'=>$status, 'errmsg'=>$errStr, 'usetime'=>$usetime];
-    }
-
-    public static function ping($target){
-        if(!function_exists('exec'))return ['status'=>false, 'error'=>'exec函数不可用', 'usetime'=>0];
-        if(!filter_var($target,FILTER_VALIDATE_IP) && checkDomain($target)){
-            $target = gethostbyname($target);
-            if(!$target)return ['status'=>false, 'error'=>'DNS resolve failed', 'usetime'=>0];
-        }
-        if(!filter_var($target,FILTER_VALIDATE_IP)){
-            return ['status'=>false, 'error'=>'Invalid IP address', 'usetime'=>0];
-        }
-        $timeout = 1;
-        exec('ping -c 1 -w '.$timeout.' '.$target.'', $output, $return_var);
-        $usetime = !empty($output[1]) ? round(getSubstr($output[1], 'time=', ' ms')) : 0;
-        $errmsg = null;
-        if($return_var !== 0){
-            $usetime = $usetime == 0 ? $timeout*1000 : $usetime;
-            $errmsg = 'ping timeout';
-        }
-        return ['status'=>$return_var===0, 'errmsg'=>$errmsg, 'usetime'=>$usetime];
-    }
-}

app/lib/DeployInterface.php

@@ -0,0 +1,12 @@
+<?php
+
+namespace app\lib;
+
+interface DeployInterface
+{
+    function check();
+
+    function deploy($fullchain, $privatekey, $config, &$info);
+
+    function setLogger($func);
+}

app/lib/DnsHelper.php

@@ -1,6 +1,7 @@
 <?php
 
 namespace app\lib;
+
 use think\facade\Db;
 
 class DnsHelper
@@ -10,68 +11,145 @@ class DnsHelper
             'name' => '阿里云',
             'config' => [
                 'ak' => 'AccessKeyId',
-                'sk' => 'AccessKeySecret'
+                'sk' => 'AccessKeySecret',
             ],
             'remark' => 1, //是否支持备注，1单独设置备注，2和记录一起设置
             'status' => true, //是否支持启用暂停
             'redirect' => true, //是否支持域名转发
             'log' => true, //是否支持查看日志
+            'weight' => false, //是否支持权重
+            'page' => false, //是否客户端分页
         ],
         'dnspod' => [
             'name' => '腾讯云',
             'config' => [
                 'ak' => 'SecretId',
-                'sk' => 'SecretKey'
+                'sk' => 'SecretKey',
             ],
             'remark' => 1,
             'status' => true,
             'redirect' => true,
             'log' => true,
+            'weight' => true,
+            'page' => false,
         ],
         'huawei' => [
             'name' => '华为云',
             'config' => [
                 'ak' => 'AccessKeyId',
-                'sk' => 'SecretAccessKey'
+                'sk' => 'SecretAccessKey',
             ],
             'remark' => 2,
             'status' => true,
             'redirect' => false,
             'log' => false,
+            'weight' => true,
+            'page' => false,
         ],
-        'west' => [
-            'name' => '西部数码',
+        'baidu' => [
+            'name' => '百度云',
             'config' => [
-                'ak' => '用户名',
-                'sk' => 'API密码'
-            ],
-            'remark' => 0,
-            'status' => true,
-            'redirect' => false,
-            'log' => false,
-        ],
-        'dnsla' => [
-            'name' => 'DNSLA',
-            'config' => [
-                'ak' => 'APIID',
-                'sk' => 'API密钥'
-            ],
-            'remark' => 0,
-            'status' => true,
-            'redirect' => true,
-            'log' => false,
-        ],
-        'cloudflare' => [
-            'name' => 'Cloudflare',
-            'config' => [
-                'ak' => '邮箱地址',
-                'sk' => 'API密钥'
+                'ak' => 'AccessKey',
+                'sk' => 'SecretKey',
             ],
             'remark' => 2,
             'status' => false,
             'redirect' => false,
             'log' => false,
+            'weight' => false,
+            'page' => true,
         ],
+        'west' => [
+            'name' => '西部数码',
+            'config' => [
+                'ak' => '用户名',
+                'sk' => 'API密码',
+            ],
+            'remark' => 0,
+            'status' => true,
+            'redirect' => false,
+            'log' => false,
+            'weight' => false,
+            'page' => false,
+        ],
+        'huoshan' => [
+            'name' => '火山引擎',
+            'config' => [
+                'ak' => 'AccessKeyId',
+                'sk' => 'SecretAccessKey',
+            ],
+            'remark' => 2,
+            'status' => true,
+            'redirect' => false,
+            'log' => false,
+            'weight' => true,
+            'page' => false,
+        ],
+        'dnsla' => [
+            'name' => 'DNSLA',
+            'config' => [
+                'ak' => 'APIID',
+                'sk' => 'API密钥',
+            ],
+            'remark' => 0,
+            'status' => true,
+            'redirect' => true,
+            'log' => false,
+            'weight' => true,
+            'page' => false,
+        ],
+        'cloudflare' => [
+            'name' => 'Cloudflare',
+            'config' => [
+                'ak' => '邮箱地址',
+                'sk' => 'API密钥/令牌',
+            ],
+            'remark' => 2,
+            'status' => false,
+            'redirect' => false,
+            'log' => false,
+            'weight' => false,
+            'page' => false,
+        ],
+        'namesilo' => [
+            'name' => 'NameSilo',
+            'config' => [
+                'ak' => '账户名',
+                'sk' => 'API Key',
+            ],
+            'remark' => 0,
+            'status' => false,
+            'redirect' => false,
+            'log' => false,
+            'weight' => false,
+            'page' => true,
+        ],
+        'powerdns' => [
+            'name' => 'PowerDNS',
+            'config' => [
+                'ak' => 'IP地址',
+                'sk' => '端口',
+                'ext' => 'API KEY',
+            ],
+            'remark' => 2,
+            'status' => true,
+            'redirect' => false,
+            'log' => false,
+            'weight' => false,
+            'page' => true,
+        ],
+    ];
+
+    public static $line_name = [
+        'aliyun' => ['DEF' => 'default', 'CT' => 'telecom', 'CU' => 'unicom', 'CM' => 'mobile', 'AB' => 'oversea'],
+        'dnspod' => ['DEF' => '0', 'CT' => '10=0', 'CU' => '10=1', 'CM' => '10=3', 'AB' => '3=0'],
+        'huawei' => ['DEF' => 'default_view', 'CT' => 'Dianxin', 'CU' => 'Liantong', 'CM' => 'Yidong', 'AB' => 'Abroad'],
+        'west' => ['DEF' => '', 'CT' => 'LTEL', 'CU' => 'LCNC', 'CM' => 'LMOB', 'AB' => 'LFOR'],
+        'dnsla' => ['DEF' => '', 'CT' => '84613316902921216', 'CU' => '84613316923892736', 'CM' => '84613316953252864', 'AB' => ''],
+        'huoshan' => ['DEF' => 'default', 'CT' => 'telecom', 'CU' => 'unicom', 'CM' => 'mobile', 'AB' => 'oversea'],
+        'baidu' => ['DEF' => 'default', 'CT' => 'ct', 'CU' => 'cnc', 'CM' => 'cmnet', 'AB' => ''],
+        'cloudflare' => ['DEF' => '0'],
+        'namesilo' => ['DEF' => '0'],
     ];
 
     public static function getList()
@@ -79,19 +157,23 @@ class DnsHelper
         return self::$dns_config;
     }
 
-    private static function getConfig($aid){
+    private static function getConfig($aid)
+    {
         $account = Db::name('account')->where('id', $aid)->find();
-        if(!$account) return false;
+        if (!$account) return false;
         return $account;
     }
 
+    /**
+     * @return DnsInterface|bool
+     */
     public static function getModel($aid, $domain = null, $domainid = null)
     {
         $config = self::getConfig($aid);
-        if(!$config) return false;
+        if (!$config) return false;
         $dnstype = $config['type'];
         $class = "\\app\\lib\\dns\\{$dnstype}";
-        if(class_exists($class)){
+        if (class_exists($class)) {
             $config['domain'] = $domain;
             $config['domainid'] = $domainid;
             $model = new $class($config);
@@ -100,11 +182,14 @@ class DnsHelper
         return false;
     }
 
+    /**
+     * @return DnsInterface|bool
+     */
     public static function getModel2($config)
     {
         $dnstype = $config['type'];
         $class = "\\app\\lib\\dns\\{$dnstype}";
-        if(class_exists($class)){
+        if (class_exists($class)) {
             $config['domain'] = $config['name'];
             $config['domainid'] = $config['thirdid'];
             $model = new $class($config);
@@ -112,4 +197,4 @@ class DnsHelper
         }
         return false;
     }
-}
+}

app/lib/DnsInterface.php

@@ -8,17 +8,17 @@ interface DnsInterface
 
     function check();
 
-    function getDomainList($KeyWord=null, $PageNumber=1, $PageSize=20);
+    function getDomainList($KeyWord = null, $PageNumber = 1, $PageSize = 20);
 
-    function getDomainRecords($PageNumber=1, $PageSize=20, $KeyWord = null, $SubDomain = null, $Type = null, $Line = null, $Status = null);
+    function getDomainRecords($PageNumber = 1, $PageSize = 20, $KeyWord = null, $SubDomain = null, $Value = null, $Type = null, $Line = null, $Status = null);
 
-    function getSubDomainRecords($SubDomain, $PageNumber=1, $PageSize=20, $Type = null, $Line = null);
+    function getSubDomainRecords($SubDomain, $PageNumber = 1, $PageSize = 20, $Type = null, $Line = null);
 
     function getDomainRecordInfo($RecordId);
 
-    function addDomainRecord($Name, $Type, $Value, $Line = 'default', $TTL = 600, $MX = 1, $Remark = null);
+    function addDomainRecord($Name, $Type, $Value, $Line = 'default', $TTL = 600, $MX = 1, $Weight = null, $Remark = null);
 
-    function updateDomainRecord($RecordId, $Name, $Type, $Value, $Line = 'default', $TTL = 600, $MX = 1, $Remark = null);
+    function updateDomainRecord($RecordId, $Name, $Type, $Value, $Line = 'default', $TTL = 600, $MX = 1, $Weight = null, $Remark = null);
 
     function updateDomainRecordRemark($RecordId, $Remark);
 
@@ -31,5 +31,4 @@ interface DnsInterface
     function getRecordLine();
 
     function getMinTTL();
-
-}
+}

app/lib/MsgNotice.php

@@ -1,105 +0,0 @@
-<?php
-
-namespace app\lib;
-
-class MsgNotice
-{
-    private static $sitename = '聚合DNS管理系统';
-
-    public static function send($action, $task, $result)
-    {
-        if($action == 1){
-            $mail_title = 'DNS容灾切换-发生告警通知';
-            $mail_content = '尊敬的系统管理员，您好：<br/>您的域名 <b>'.$task['domain'].'</b> 的 <b>'.$task['main_value'].'</b> 记录发生了异常';
-            if($task['type'] == 2){
-                $mail_content .= '，已自动切换为备用解析记录 '.$task['backup_value'].' ';
-            }elseif($task['type'] == 1){
-                $mail_content .= '，已自动暂停解析';
-            }else{
-                $mail_content .= '，请及时处理';
-            }
-            if(!empty($result['errmsg'])){
-                $mail_content .= '。<br/>异常信息：'.$result['errmsg'];
-            }
-        }else{
-            $mail_title = 'DNS容灾切换-恢复正常通知';
-            $mail_content = '尊敬的系统管理员，您好：<br/>您的域名 <b>'.$task['domain'].'</b> 的 <b>'.$task['main_value'].'</b> 记录已恢复正常';
-            if($task['type'] == 2){
-                $mail_content .= '，已自动切换回当前解析记录';
-            }elseif($task['type'] == 1){
-                $mail_content .= '，已自动开启解析';
-            }
-            $lasttime = convert_second(time() - $task['switchtime']);
-            $mail_content .= '。<br/>异常持续时间：'.$lasttime;
-        }
-        if(!empty($task['remark'])) $mail_title .= '('.$task['remark'].')';
-        if(!empty($task['remark'])) $mail_content .= '<br/>备注：'.$task['remark'];
-        $mail_content .= '<br/>'.self::$sitename.'<br/>'.date('Y-m-d H:i:s');
-
-        if(config_get('notice_mail') == 1){
-            $mail_name = config_get('mail_recv')?config_get('mail_recv'):config_get('mail_name');
-            self::send_mail($mail_name, $mail_title, $mail_content);
-        }
-        if(config_get('notice_wxtpl') == 1){
-            $mail_content = str_replace(['<br/>', '<b>', '</b>'], ["\n\n", '**', '**'], $mail_content);
-            self::send_wechat_tplmsg($mail_title, $mail_content);
-        }
-    }
-    
-    public static function send_mail($to, $sub, $msg){
-        $mail_type = config_get('mail_type');
-        if($mail_type == 1){
-            $mail = new \app\lib\mail\Sendcloud(config_get('mail_apiuser'), config_get('mail_apikey'));
-		    return $mail->send($to, $sub, $msg, config_get('mail_name'), self::$sitename);
-        }elseif($mail_type == 2){
-            $mail = new \app\lib\mail\Aliyun(config_get('mail_apiuser'), config_get('mail_apikey'));
-            return $mail->send($to, $sub, $msg, config_get('mail_name'), self::$sitename);
-        }else{
-            $mail_name = config_get('mail_name');
-            $mail_port = intval(config_get('mail_port'));
-            $mail_smtp = config_get('mail_smtp');
-            $mail_pwd = config_get('mail_pwd');
-            if(!$mail_name || !$mail_port || !$mail_smtp || !$mail_pwd)return false;
-            $mail = new \app\lib\mail\PHPMailer\PHPMailer(true);
-            try{
-                $mail->SMTPDebug = 0;
-                $mail->CharSet = 'UTF-8';
-                $mail->Timeout = 5;
-                $mail->isSMTP();
-                $mail->Host = $mail_smtp;
-                $mail->SMTPAuth = true;
-                $mail->Username = $mail_name;
-                $mail->Password = $mail_pwd;
-                if($mail_port == 587) $mail->SMTPSecure = 'tls';
-                else if($mail_port >= 465) $mail->SMTPSecure = 'ssl';
-                else $mail->SMTPAutoTLS = false;
-                $mail->Port = $mail_port;
-                $mail->setFrom($mail_name, self::$sitename);
-                $mail->addAddress($to);
-                $mail->addReplyTo($mail_name, self::$sitename);
-                $mail->isHTML(true);
-                $mail->Subject = $sub;
-                $mail->Body = $msg;
-                $mail->send();
-                return true;
-            } catch (\Exception $e) {
-                return $mail->ErrorInfo;
-            }
-        }
-    }
-
-    public static function send_wechat_tplmsg($title, $content){
-        $wechat_apptoken = config_get('wechat_apptoken');
-        $wechat_appuid = config_get('wechat_appuid');
-        if(!$wechat_apptoken||!$wechat_appuid)return false;
-		$url = 'https://wxpusher.zjiecode.com/api/send/message';
-		$post = ['appToken'=>$wechat_apptoken, 'content'=>$content, 'summary'=>$title, 'contentType'=>3, 'uids'=>[$wechat_appuid]];
-		$result = get_curl($url, json_encode($post),0,0,0,0,0,['Content-Type: application/json; charset=UTF-8']);
-		$arr = json_decode($result, true);
-		if(isset($arr['success']) && $arr['success']==true){
-			return true;
-		}else{
-			return $arr['msg'];
-		}
-    }
-}

app/lib/TOTP.php

@@ -0,0 +1,228 @@
+<?php
+
+namespace app\lib;
+
+class TOTP
+{
+    private static $BASE32_ALPHABET = 'abcdefghijklmnopqrstuvwxyz234567';
+
+    private $period = 30;
+    private $digest = 'sha1';
+    private $digits = 6;
+    private $epoch = 0;
+
+    private $secret;
+    private $issuer;
+    private $label;
+
+    public function __construct(?string $secret)
+    {
+        if ($secret == null) {
+            $secret = $this->generateSecret();
+        }
+        $this->secret = $secret;
+    }
+
+    public static function create(?string $secret = null)
+    {
+        return new self($secret);
+    }
+
+    public function getSecret(): string
+    {
+        return $this->secret;
+    }
+
+    public function getLabel(): ?string
+    {
+        return $this->label;
+    }
+
+    public function setLabel(string $label): void
+    {
+        $this->label = $label;
+    }
+
+    public function getIssuer(): ?string
+    {
+        return $this->issuer;
+    }
+
+    public function setIssuer(string $issuer): void
+    {
+        $this->issuer = $issuer;
+    }
+
+    public function verify(string $otp, ?int $timestamp = null, ?int $window = null): bool
+    {
+        $timestamp = $this->getTimestamp($timestamp);
+
+        if (null === $window) {
+            return $this->compareOTP($this->at($timestamp), $otp);
+        }
+
+        return $this->verifyOtpWithWindow($otp, $timestamp, $window);
+    }
+
+    private function verifyOtpWithWindow(string $otp, int $timestamp, int $window): bool
+    {
+        $window = abs($window);
+
+        for ($i = 0; $i <= $window; ++$i) {
+            $next = $i * $this->period + $timestamp;
+            $previous = -$i * $this->period + $timestamp;
+            $valid = $this->compareOTP($this->at($next), $otp) ||
+                $this->compareOTP($this->at($previous), $otp);
+
+            if ($valid) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+
+    public function getProvisioningUri(): string
+    {
+        $params = [];
+        if (30 !== $this->period) {
+            $params['period'] = $this->period;
+        }
+        if (0 !== $this->epoch) {
+            $params['epoch'] = $this->epoch;
+        }
+        $label = $this->getLabel();
+        if (null === $label) {
+            throw new \InvalidArgumentException('The label is not set.');
+        }
+        if ($this->hasColon($label)) {
+            throw new \InvalidArgumentException('Label must not contain a colon.');
+        }
+        $params['issuer'] = $this->getIssuer();
+        $params['secret'] = $this->getSecret();
+        $query = str_replace(['+', '%7E'], ['%20', '~'], http_build_query($params));
+        return sprintf('otpauth://totp/%s?%s', rawurlencode((null !== $this->getIssuer() ? $this->getIssuer() . ':' : '') . $label), $query);
+    }
+
+    /**
+     * The OTP at the specified input.
+     */
+    private function generateOTP(int $input): string
+    {
+        $hash = hash_hmac($this->digest, $this->intToByteString($input), $this->base32_decode($this->getSecret()), true);
+
+        $hmac = array_values(unpack('C*', $hash));
+
+        $offset = ($hmac[\count($hmac) - 1] & 0xF);
+        $code = ($hmac[$offset + 0] & 0x7F) << 24 | ($hmac[$offset + 1] & 0xFF) << 16 | ($hmac[$offset + 2] & 0xFF) << 8 | ($hmac[$offset + 3] & 0xFF);
+        $otp = $code % (10 ** $this->digits);
+
+        return str_pad((string) $otp, $this->digits, '0', STR_PAD_LEFT);
+    }
+
+    private function at(int $timestamp): string
+    {
+        return $this->generateOTP($this->timecode($timestamp));
+    }
+
+    private function timecode(int $timestamp): int
+    {
+        return (int) floor(($timestamp - $this->epoch) / $this->period);
+    }
+
+    private function getTimestamp(?int $timestamp): int
+    {
+        $timestamp = $timestamp ?? time();
+        if ($timestamp < 0) {
+            throw new \InvalidArgumentException('Timestamp must be at least 0.');
+        }
+
+        return $timestamp;
+    }
+
+    private function generateSecret(): string
+    {
+        return strtoupper($this->base32_encode(random_bytes(20)));
+    }
+
+    private function base32_encode($data)
+    {
+        $dataSize = strlen($data);
+        $res = '';
+        $remainder = 0;
+        $remainderSize = 0;
+
+        for ($i = 0; $i < $dataSize; $i++) {
+            $b = ord($data[$i]);
+            $remainder = ($remainder << 8) | $b;
+            $remainderSize += 8;
+            while ($remainderSize > 4) {
+                $remainderSize -= 5;
+                $c = $remainder & (31 << $remainderSize);
+                $c >>= $remainderSize;
+                $res .= self::$BASE32_ALPHABET[$c];
+            }
+        }
+        if ($remainderSize > 0) {
+            $remainder <<= (5 - $remainderSize);
+            $c = $remainder & 31;
+            $res .= self::$BASE32_ALPHABET[$c];
+        }
+
+        return $res;
+    }
+
+    private function base32_decode($data)
+    {
+        $data = strtolower($data);
+        $dataSize = strlen($data);
+        $buf = 0;
+        $bufSize = 0;
+        $res = '';
+
+        for ($i = 0; $i < $dataSize; $i++) {
+            $c = $data[$i];
+            $b = strpos(self::$BASE32_ALPHABET, $c);
+            if ($b === false) {
+                throw new \Exception('Encoded string is invalid, it contains unknown char #'.ord($c));
+            }
+            $buf = ($buf << 5) | $b;
+            $bufSize += 5;
+            if ($bufSize > 7) {
+                $bufSize -= 8;
+                $b = ($buf & (0xff << $bufSize)) >> $bufSize;
+                $res .= chr($b);
+            }
+        }
+
+        return $res;
+    }
+
+    private function intToByteString(int $int): string
+    {
+        $result = [];
+        while (0 !== $int) {
+            $result[] = \chr($int & 0xFF);
+            $int >>= 8;
+        }
+
+        return str_pad(implode(array_reverse($result)), 8, "\000", STR_PAD_LEFT);
+    }
+
+    private function compareOTP(string $safe, string $user): bool
+    {
+        return hash_equals($safe, $user);
+    }
+
+    private function hasColon(string $value): bool
+    {
+        $colons = [':', '%3A', '%3a'];
+        foreach ($colons as $colon) {
+            if (false !== mb_strpos($value, $colon)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+}

app/lib/acme/ACMECert.php

@@ -0,0 +1,683 @@
+<?php
+
+namespace app\lib\acme;
+
+use Exception;
+use stdClass;
+
+/**
+ * ACMECert
+ * https://github.com/skoerfgen/ACMECert
+ */
+class ACMECert extends ACMEv2
+{
+	private $alternate_chains = array();
+
+	public function register($termsOfServiceAgreed = false, $contacts = array())
+	{
+		return $this->_register($termsOfServiceAgreed, $contacts);
+	}
+
+	public function registerEAB($termsOfServiceAgreed, $eab_kid, $eab_hmac, $contacts = array())
+	{
+		if (!$this->resources) $this->readDirectory();
+
+		$protected = array(
+			'alg' => 'HS256',
+			'kid' => $eab_kid,
+			'url' => $this->resources['newAccount']
+		);
+		$payload = $this->jwk_header['jwk'];
+
+		$protected64 = $this->base64url(json_encode($protected, JSON_UNESCAPED_SLASHES));
+		$payload64 = $this->base64url(json_encode($payload, JSON_UNESCAPED_SLASHES));
+
+		$signature = hash_hmac('sha256', $protected64 . '.' . $payload64, $this->base64url_decode($eab_hmac), true);
+
+		return $this->_register($termsOfServiceAgreed, $contacts, array(
+			'externalAccountBinding' => array(
+				'protected' => $protected64,
+				'payload' => $payload64,
+				'signature' => $this->base64url($signature)
+			)
+		));
+	}
+
+	private function _register($termsOfServiceAgreed = false, $contacts = array(), $extra = array())
+	{
+		$this->log('Registering account');
+
+		$ret = $this->request('newAccount', array(
+			'termsOfServiceAgreed' => (bool)$termsOfServiceAgreed,
+			'contact' => $this->make_contacts_array($contacts)
+		) + $extra);
+		$this->log($ret['code'] == 201 ? 'Account registered' : 'Account already registered');
+		return $this->kid_header['kid'];
+	}
+
+	public function update($contacts = array())
+	{
+		$this->log('Updating account');
+		$ret = $this->request($this->getAccountID(), array(
+			'contact' => $this->make_contacts_array($contacts)
+		));
+		$this->log('Account updated');
+		return $ret['body'];
+	}
+
+	public function getAccount()
+	{
+		$ret = parent::getAccount();
+		return $this->kid_header['kid'];
+	}
+
+	public function setAccount($kid)
+	{
+		$this->kid_header['kid'] = $kid;
+	}
+
+	public function deactivateAccount()
+	{
+		$this->log('Deactivating account');
+		$ret = $this->deactivate($this->getAccountID());
+		$this->log('Account deactivated');
+		return $ret;
+	}
+
+	public function deactivate($url)
+	{
+		$this->log('Deactivating resource: ' . $url);
+		$ret = $this->request($url, array('status' => 'deactivated'));
+		$this->log('Resource deactivated');
+		return $ret['body'];
+	}
+
+	public function getTermsURL()
+	{
+		if (!$this->resources) $this->readDirectory();
+		if (!isset($this->resources['meta']['termsOfService'])) {
+			throw new Exception('Failed to get Terms Of Service URL');
+		}
+		return $this->resources['meta']['termsOfService'];
+	}
+
+	public function getCAAIdentities()
+	{
+		if (!$this->resources) $this->readDirectory();
+		if (!isset($this->resources['meta']['caaIdentities'])) {
+			throw new Exception('Failed to get CAA Identities');
+		}
+		return $this->resources['meta']['caaIdentities'];
+	}
+
+	public function keyChange($new_account_key_pem)
+	{ // account key roll-over
+		$this->loadAccountKey($new_account_key_pem);
+		$account = $this->getAccountID();
+		$this->resources = $this->resources;
+
+		$this->log('Account Key Roll-Over');
+
+		$ret = $this->request(
+			'keyChange',
+			$this->jws_encapsulate('keyChange', array(
+				'account' => $account,
+				'oldKey' => $this->jwk_header['jwk']
+			), true)
+		);
+		$this->log('Account Key Roll-Over successful');
+
+		$this->loadAccountKey($new_account_key_pem);
+		return $ret['body'];
+	}
+
+	public function revoke($pem)
+	{
+		if (false === ($res = openssl_x509_read($pem))) {
+			throw new Exception('Could not load certificate: ' . $pem . ' (' . $this->get_openssl_error() . ')');
+		}
+		if (false === (openssl_x509_export($res, $certificate))) {
+			throw new Exception('Could not export certificate: ' . $pem . ' (' . $this->get_openssl_error() . ')');
+		}
+
+		$this->log('Revoking certificate');
+		$this->request('revokeCert', array(
+			'certificate' => $this->base64url($this->pem2der($certificate))
+		));
+		$this->log('Certificate revoked');
+	}
+
+	public function createOrder($domain_config, $settings = array())
+	{
+		$settings = $this->parseSettings($settings);
+
+		$domain_config = array_change_key_case($domain_config, CASE_LOWER);
+		$domains = array_keys($domain_config);
+		$authz_deactivated = false;
+
+		// === Order ===
+		$this->log('Creating Order');
+		$ret = $this->request('newOrder', $this->makeOrder($domains, $settings));
+		$order = $ret['body'];
+		$order_location = $ret['headers']['location'];
+		$this->log('Order created: ' . $order_location);
+		$order['location'] = $order_location;
+
+		// === Authorization ===
+		if ($order['status'] === 'ready' && $settings['authz_reuse']) {
+			$this->log('All authorizations already valid, skipping validation altogether');
+		} else {
+			$auth_count = count($order['authorizations']);
+			$challenges = array();
+
+			foreach ($order['authorizations'] as $idx => $auth_url) {
+				$this->log('Fetching authorization ' . ($idx + 1) . ' of ' . $auth_count);
+				$ret = $this->request($auth_url, '');
+				$authorization = $ret['body'];
+
+				// wildcard authorization identifiers have no leading *.
+				$domain = ( // get domain and add leading *. if wildcard is used
+					isset($authorization['wildcard']) &&
+					$authorization['wildcard'] ?
+					'*.' : ''
+				) . $authorization['identifier']['value'];
+
+				if ($authorization['status'] === 'valid') {
+					if ($settings['authz_reuse']) {
+						$this->log('Authorization of ' . $domain . ' already valid, skipping validation');
+					} else {
+						$this->log('Authorization of ' . $domain . ' already valid, deactivating authorization');
+						$this->deactivate($auth_url);
+						$authz_deactivated = true;
+					}
+					continue;
+				}
+
+				if(!isset($domain_config[$domain])) {
+					$this->log('Domain ' . $domain . ' not found in domain_config');
+					continue;
+				}
+
+				$config = $domain_config[$domain];
+				$type = $config['challenge'];
+
+				$challenge = $this->parse_challenges($authorization, $type, $challenge_url);
+
+				$opts = array(
+					'domain' => $domain,
+					'type' => $type,
+					'auth_url' => $auth_url,
+					'challenge_url' => $challenge_url
+				);
+				list($opts['key'], $opts['value']) = $challenge;
+				
+				$challenges[] = $opts;
+			}
+
+			if ($authz_deactivated) {
+				$this->log('Restarting Order after deactivating already valid authorizations');
+				$settings['authz_reuse'] = true;
+				return $this->createOrder($domain_config, $settings);
+			}
+
+			$order['challenges'] = $challenges;
+		}
+		return $order;
+	}
+
+	public function authOrder($order)
+	{
+		if ($order['status'] != 'pending' && $order['status'] != 'ready' && empty($order['challenges'])) {
+			throw new Exception('No challenges available');
+		}
+
+		// === Challenge ===
+		if (!empty($order['challenges'])){
+			foreach ($order['challenges'] as $opts) {
+				$this->log('Notifying server for validation of ' . $opts['domain']);
+				$this->request($opts['challenge_url'], new stdClass);
+	
+				$this->log('Waiting for server challenge validation');
+				sleep(1);
+	
+				if (!$this->poll('pending', $opts['auth_url'], $body)) {
+					$this->log('Validation failed: ' . $opts['domain']);
+	
+					$error = $body['challenges'][0]['error'];
+					throw $this->create_ACME_Exception(
+						$error['type'],
+						'Challenge validation failed: ' . $error['detail']
+					);
+				} else {
+					$this->log('Validation successful: ' . $opts['domain']);
+				}
+			}
+		}
+	}
+
+	public function finalizeOrder($domains, $order, $pem)
+	{
+		// autodetect if Private Key or CSR is used
+		if ($key = openssl_pkey_get_private($pem)) { // Private Key detected
+			if (PHP_MAJOR_VERSION < 8) openssl_free_key($key);
+			$this->log('Generating CSR');
+			$csr = $this->generateCSR($pem, $domains);
+		} elseif (openssl_csr_get_subject($pem)) { // CSR detected
+			$this->log('Using provided CSR');
+			if (0 === strpos($pem, 'file://')) {
+				$csr = file_get_contents(substr($pem, 7));
+				if (false === $csr) {
+					throw new Exception('Failed to read CSR from ' . $pem . ' (' . $this->get_openssl_error() . ')');
+				}
+			} else {
+				$csr = $pem;
+			}
+		} else {
+			throw new Exception('Could not load Private Key or CSR (' . $this->get_openssl_error() . '): ' . $pem);
+		}
+
+		$this->log('Finalizing Order');
+
+		$ret = $this->request($order['finalize'], array(
+			'csr' => $this->base64url($this->pem2der($csr))
+		));
+		$ret = $ret['body'];
+
+		if (isset($ret['certificate'])) {
+			return $this->request_certificate($ret);
+		}
+
+		if ($this->poll('processing', $order['location'], $ret)) {
+			return $this->request_certificate($ret);
+		}
+
+		throw new Exception('Order failed');
+	}
+
+	public function finalizeOrders($domains, $order, $pem)
+	{
+		$default_chain = $this->finalizeOrder($domains, $order, $pem);
+
+		$out = array();
+		$out[$this->getTopIssuerCN($default_chain)] = $default_chain;
+
+		foreach ($this->alternate_chains as $link) {
+			$chain = $this->request_certificate(array('certificate' => $link), true);
+			$out[$this->getTopIssuerCN($chain)] = $chain;
+		}
+
+		$this->log('Received ' . count($out) . ' chain(s): ' . implode(', ', array_keys($out)));
+		return $out;
+	}
+
+	public function generateCSR($domain_key_pem, $domains)
+	{
+		if (false === ($domain_key = openssl_pkey_get_private($domain_key_pem))) {
+			throw new Exception('Could not load domain key: ' . $domain_key_pem . ' (' . $this->get_openssl_error() . ')');
+		}
+
+		$fn = $this->tmp_ssl_cnf($domains);
+		$cn = reset($domains);
+		$dn = array();
+		if (strlen($cn) <= 64) {
+			$dn['commonName'] = $cn;
+		}
+		$csr = openssl_csr_new($dn, $domain_key, array(
+			'config' => $fn,
+			'req_extensions' => 'SAN',
+			'digest_alg' => 'sha512'
+		));
+		unlink($fn);
+		if (PHP_MAJOR_VERSION < 8) openssl_free_key($domain_key);
+
+		if (false === $csr) {
+			throw new Exception('Could not generate CSR ! (' . $this->get_openssl_error() . ')');
+		}
+		if (false === openssl_csr_export($csr, $out)) {
+			throw new Exception('Could not export CSR ! (' . $this->get_openssl_error() . ')');
+		}
+
+		return $out;
+	}
+
+	private function generateKey($opts)
+	{
+		$fn = $this->tmp_ssl_cnf();
+		$config = array('config' => $fn) + $opts;
+		if (false === ($key = openssl_pkey_new($config))) {
+			throw new Exception('Could not generate new private key ! (' . $this->get_openssl_error() . ')');
+		}
+		if (false === openssl_pkey_export($key, $pem, null, $config)) {
+			throw new Exception('Could not export private key ! (' . $this->get_openssl_error() . ')');
+		}
+		unlink($fn);
+		if (PHP_MAJOR_VERSION < 8) openssl_free_key($key);
+		return $pem;
+	}
+
+	public function generateRSAKey($bits = 2048)
+	{
+		return $this->generateKey(array(
+			'private_key_bits' => (int)$bits,
+			'private_key_type' => OPENSSL_KEYTYPE_RSA
+		));
+	}
+
+	public function generateECKey($curve_name = '384')
+	{
+		if (version_compare(PHP_VERSION, '7.1.0') < 0) throw new Exception('PHP >= 7.1.0 required for EC keys !');
+		$map = array('256' => 'prime256v1', '384' => 'secp384r1', '521' => 'secp521r1');
+		if (isset($map[$curve_name])) $curve_name = $map[$curve_name];
+		return $this->generateKey(array(
+			'curve_name' => $curve_name,
+			'private_key_type' => OPENSSL_KEYTYPE_EC
+		));
+	}
+
+	public function parseCertificate($cert_pem)
+	{
+		if (false === ($ret = openssl_x509_read($cert_pem))) {
+			throw new Exception('Could not load certificate: ' . $cert_pem . ' (' . $this->get_openssl_error() . ')');
+		}
+		if (!is_array($ret = openssl_x509_parse($ret, true))) {
+			throw new Exception('Could not parse certificate (' . $this->get_openssl_error() . ')');
+		}
+		return $ret;
+	}
+
+	public function getSAN($pem)
+	{
+		$ret = $this->parseCertificate($pem);
+		if (!isset($ret['extensions']['subjectAltName'])) {
+			throw new Exception('No Subject Alternative Name (SAN) found in certificate');
+		}
+		$out = array();
+		foreach (explode(',', $ret['extensions']['subjectAltName']) as $line) {
+			list($type, $name) = array_map('trim', explode(':', $line));
+			if ($type === 'DNS') {
+				$out[] = $name;
+			}
+		}
+		return $out;
+	}
+
+	public function getRemainingDays($cert_pem)
+	{
+		$ret = $this->parseCertificate($cert_pem);
+		return ($ret['validTo_time_t'] - time()) / 86400;
+	}
+
+	public function getRemainingPercent($cert_pem)
+	{
+		$ret = $this->parseCertificate($cert_pem);
+		$total = $ret['validTo_time_t'] - $ret['validFrom_time_t'];
+		$used = time() - $ret['validFrom_time_t'];
+		return (1 - max(0, min(1, $used / $total))) * 100;
+	}
+
+	public function generateALPNCertificate($domain_key_pem, $domain, $token)
+	{
+		$domains = array($domain);
+		$csr = $this->generateCSR($domain_key_pem, $domains);
+
+		$fn = $this->tmp_ssl_cnf($domains, '1.3.6.1.5.5.7.1.31=critical,DER:0420' . $token . "\n");
+		$config = array(
+			'config' => $fn,
+			'x509_extensions' => 'SAN',
+			'digest_alg' => 'sha512'
+		);
+		$cert = openssl_csr_sign($csr, null, $domain_key_pem, 1, $config);
+		unlink($fn);
+		if (false === $cert) {
+			throw new Exception('Could not generate self signed certificate ! (' . $this->get_openssl_error() . ')');
+		}
+		if (false === openssl_x509_export($cert, $out)) {
+			throw new Exception('Could not export self signed certificate ! (' . $this->get_openssl_error() . ')');
+		}
+		return $out;
+	}
+
+	public function getARI($pem, &$ari_cert_id = null)
+	{
+		$ari_cert_id = null;
+		$id = $this->getARICertID($pem);
+
+		if (!$this->resources) $this->readDirectory();
+		if (!isset($this->resources['renewalInfo'])) throw new Exception('ARI not supported');
+
+		$ret = $this->http_request($this->resources['renewalInfo'] . '/' . $id);
+
+		if (!is_array($ret['body']['suggestedWindow'])) throw new Exception('ARI suggestedWindow not present');
+
+		$sw = &$ret['body']['suggestedWindow'];
+
+		if (!isset($sw['start'])) throw new Exception('ARI suggestedWindow start not present');
+		if (!isset($sw['end'])) throw new Exception('ARI suggestedWindow end not present');
+
+		$sw = array_map(array($this, 'parseDate'), $sw);
+
+		$ari_cert_id = $id;
+		return $ret['body'];
+	}
+
+	private function getARICertID($pem)
+	{
+		if (version_compare(PHP_VERSION, '7.1.2', '<')) {
+			throw new Exception('PHP Version >= 7.1.2 required for ARI'); // serialNumberHex - https://github.com/php/php-src/pull/1755
+		}
+		$ret = $this->parseCertificate($pem);
+
+		if (!isset($ret['extensions']['authorityKeyIdentifier'])) {
+			throw new Exception('authorityKeyIdentifier missing');
+		}
+		$aki = hex2bin(str_replace(':', '', substr(trim($ret['extensions']['authorityKeyIdentifier']), 6)));
+		if (!$aki) throw new Exception('Failed to parse authorityKeyIdentifier');
+
+		if (!isset($ret['serialNumberHex'])) {
+			throw new Exception('serialNumberHex missing');
+		}
+		$ser = hex2bin(trim($ret['serialNumberHex']));
+		if (!$ser) throw new Exception('Failed to parse serialNumberHex');
+
+		return $this->base64url($aki) . '.' . $this->base64url($ser);
+	}
+
+	private function parseDate($str)
+	{
+		$ret = strtotime(preg_replace('/(\.\d\d)\d+/', '$1', $str));
+		if ($ret === false) throw new Exception('Failed to parse date: ' . $str);
+		return $ret;
+	}
+
+	private function parseSettings($opts)
+	{
+		// authz_reuse: backwards compatibility to ACMECert v3.1.2 or older
+		if (!is_array($opts)) $opts = array('authz_reuse' => (bool)$opts);
+		if (!isset($opts['authz_reuse'])) $opts['authz_reuse'] = true;
+
+		$diff = array_diff_key(
+			$opts,
+			array_flip(array('authz_reuse', 'notAfter', 'notBefore', 'replaces'))
+		);
+
+		if (!empty($diff)) {
+			throw new Exception('getCertificateChain(s): Invalid option "' . key($diff) . '"');
+		}
+
+		return $opts;
+	}
+
+	private function setRFC3339Date(&$out, $key, $opts)
+	{
+		if (isset($opts[$key])) {
+			$out[$key] = is_string($opts[$key]) ?
+				$opts[$key] :
+				date(DATE_RFC3339, $opts[$key]);
+		}
+	}
+
+	private function makeOrder($domains, $opts)
+	{
+		$order = array(
+			'identifiers' => array_map(
+				function ($domain) {
+					return array('type' => 'dns', 'value' => $domain);
+				},
+				$domains
+			)
+		);
+		$this->setRFC3339Date($order, 'notAfter', $opts);
+		$this->setRFC3339Date($order, 'notBefore', $opts);
+
+		if (isset($opts['replaces'])) { // ARI
+			$order['replaces'] = $opts['replaces'];
+			$this->log('Replacing Certificate: ' . $opts['replaces']);
+		}
+
+		return $order;
+	}
+
+	private function parse_challenges($authorization, $type, &$url)
+	{
+		foreach ($authorization['challenges'] as $challenge) {
+			if ($challenge['type'] != $type) continue;
+
+			$url = $challenge['url'];
+
+			switch ($challenge['type']) {
+				case 'dns-01':
+					return array(
+						'_acme-challenge.' . $authorization['identifier']['value'],
+						$this->base64url(hash('sha256', $this->keyAuthorization($challenge['token']), true))
+					);
+					break;
+				case 'http-01':
+					return array(
+						'/.well-known/acme-challenge/' . $challenge['token'],
+						$this->keyAuthorization($challenge['token'])
+					);
+					break;
+				case 'tls-alpn-01':
+					return array(null, hash('sha256', $this->keyAuthorization($challenge['token'])));
+					break;
+			}
+		}
+		throw new Exception(
+			'Challenge type: "' . $type . '" not available, for this challenge use ' .
+				implode(' or ', array_map(
+					function ($a) {
+						return '"' . $a['type'] . '"';
+					},
+					$authorization['challenges']
+				))
+		);
+	}
+
+	private function poll($initial, $type, &$ret)
+	{
+		$max_tries = 10; // ~ 5 minutes
+		for ($i = 0; $i < $max_tries; $i++) {
+			$ret = $this->request($type);
+			$ret = $ret['body'];
+			if ($ret['status'] !== $initial) return $ret['status'] === 'valid';
+			$s = pow(2, min($i, 6));
+			if ($i !== $max_tries - 1) {
+				$this->log('Retrying in ' . ($s) . 's');
+				sleep($s);
+			}
+		}
+		throw new Exception('Aborted after ' . $max_tries . ' tries');
+	}
+
+	private function request_certificate($ret, $alternate = false)
+	{
+		$this->log('Requesting ' . ($alternate ? 'alternate' : 'default') . ' certificate-chain');
+		$ret = $this->request($ret['certificate'], '');
+		if ($ret['headers']['content-type'] !== 'application/pem-certificate-chain') {
+			throw new Exception('Unexpected content-type: ' . $ret['headers']['content-type']);
+		}
+
+		$chain = array();
+		foreach ($this->splitChain($ret['body']) as $cert) {
+			$info = $this->parseCertificate($cert);
+			$chain[] = '[' . $info['issuer']['CN'] . ']';
+		}
+
+		if (!$alternate) {
+			if (isset($ret['headers']['link']['alternate'])) {
+				$this->alternate_chains = $ret['headers']['link']['alternate'];
+			} else {
+				$this->alternate_chains = array();
+			}
+		}
+
+		$this->log(($alternate ? 'Alternate' : 'Default') . ' certificate-chain retrieved: ' . implode(' -> ', array_reverse($chain, true)));
+		return $ret['body'];
+	}
+
+	private function tmp_ssl_cnf($domains = null, $extension = '')
+	{
+		if (false === ($fn = tempnam(sys_get_temp_dir(), "CNF_"))) {
+			throw new Exception('Failed to create temp file !');
+		}
+		if (false === @file_put_contents(
+			$fn,
+			'HOME = .' . "\n" .
+				'RANDFILE=$ENV::HOME/.rnd' . "\n" .
+				'[v3_ca]' . "\n" .
+				'[req]' . "\n" .
+				'default_bits=2048' . "\n" .
+				($domains ?
+					'distinguished_name=req_distinguished_name' . "\n" .
+					'[req_distinguished_name]' . "\n" .
+					'[v3_req]' . "\n" .
+					'[SAN]' . "\n" .
+					'subjectAltName=' .
+					implode(',', array_map(function ($domain) {
+						return 'DNS:' . $domain;
+					}, $domains)) . "\n"
+					:
+					''
+				) . $extension
+		)) {
+			throw new Exception('Failed to write tmp file: ' . $fn);
+		}
+		return $fn;
+	}
+
+	private function pem2der($pem)
+	{
+		return base64_decode(implode('', array_slice(
+			array_map('trim', explode("\n", trim($pem))),
+			1,
+			-1
+		)));
+	}
+
+	private function make_contacts_array($contacts)
+	{
+		if (!is_array($contacts)) {
+			$contacts = $contacts ? array($contacts) : array();
+		}
+		return array_map(function ($contact) {
+			return 'mailto:' . $contact;
+		}, $contacts);
+	}
+
+	private function getTopIssuerCN($chain)
+	{
+		$tmp = $this->splitChain($chain);
+		$ret = $this->parseCertificate(end($tmp));
+		return $ret['issuer']['CN'];
+	}
+
+	public function splitChain($chain)
+	{
+		$delim = '-----END CERTIFICATE-----';
+		return array_map(function ($item) use ($delim) {
+			return trim($item . $delim);
+		}, array_filter(explode($delim, $chain), function ($item) {
+			return strpos($item, '-----BEGIN CERTIFICATE-----') !== false;
+		}));
+	}
+}

app/lib/acme/ACME_Exception.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace app\lib\acme;
+
+use Exception;
+
+class ACME_Exception extends Exception
+{
+	private $type, $subproblems;
+	function __construct($type, $detail, $subproblems = array())
+	{
+		$this->type = $type;
+		$this->subproblems = $subproblems;
+		parent::__construct($detail);
+	}
+	function getType()
+	{
+		return $this->type;
+	}
+	function getSubproblems()
+	{
+		return $this->subproblems;
+	}
+}

app/lib/acme/ACMEv2.php

@@ -0,0 +1,409 @@
+<?php
+
+namespace app\lib\acme;
+
+use Exception;
+
+class ACMEv2
+{ // Communication with Let's Encrypt via ACME v2 protocol
+
+	protected
+		$ch = null, $logger = true, $bits, $sha_bits, $directory, $resources, $jwk_header, $kid_header, $account_key, $thumbprint, $nonce = null, $proxy;
+	private $delay_until = null;
+
+	public function __construct($directory, $proxy = false)
+	{
+		$this->directory = $directory;
+		$this->proxy = $proxy;
+	}
+
+	public function __destruct()
+	{
+		if (PHP_MAJOR_VERSION < 8 && $this->account_key) openssl_pkey_free($this->account_key);
+		if ($this->ch) curl_close($this->ch);
+	}
+
+	public function loadAccountKey($account_key_pem)
+	{
+		if (PHP_MAJOR_VERSION < 8 && $this->account_key) openssl_pkey_free($this->account_key);
+		if (false === ($this->account_key = openssl_pkey_get_private($account_key_pem))) {
+			throw new Exception('Could not load account key: ' . $account_key_pem . ' (' . $this->get_openssl_error() . ')');
+		}
+
+		if (false === ($details = openssl_pkey_get_details($this->account_key))) {
+			throw new Exception('Could not get account key details: ' . $account_key_pem . ' (' . $this->get_openssl_error() . ')');
+		}
+
+		$this->bits = $details['bits'];
+		switch ($details['type']) {
+			case OPENSSL_KEYTYPE_EC:
+				if (version_compare(PHP_VERSION, '7.1.0') < 0) throw new Exception('PHP >= 7.1.0 required for EC keys !');
+				$this->sha_bits = ($this->bits == 521 ? 512 : $this->bits);
+				$this->jwk_header = array( // JOSE Header - RFC7515
+					'alg' => 'ES' . $this->sha_bits,
+					'jwk' => array( // JSON Web Key
+						'crv' => 'P-' . $details['bits'],
+						'kty' => 'EC',
+						'x' => $this->base64url(str_pad($details['ec']['x'], ceil($this->bits / 8), "\x00", STR_PAD_LEFT)),
+						'y' => $this->base64url(str_pad($details['ec']['y'], ceil($this->bits / 8), "\x00", STR_PAD_LEFT))
+					)
+				);
+				break;
+			case OPENSSL_KEYTYPE_RSA:
+				$this->sha_bits = 256;
+				$this->jwk_header = array( // JOSE Header - RFC7515
+					'alg' => 'RS256',
+					'jwk' => array( // JSON Web Key
+						'e' => $this->base64url($details['rsa']['e']), // public exponent
+						'kty' => 'RSA',
+						'n' => $this->base64url($details['rsa']['n']) // public modulus
+					)
+				);
+				break;
+			default:
+				throw new Exception('Unsupported key type! Must be RSA or EC key.');
+				break;
+		}
+
+		$this->kid_header = array(
+			'alg' => $this->jwk_header['alg'],
+			'kid' => null
+		);
+
+		$this->thumbprint = $this->base64url( // JSON Web Key (JWK) Thumbprint - RFC7638
+			hash(
+				'sha256',
+				json_encode($this->jwk_header['jwk']),
+				true
+			)
+		);
+	}
+
+	public function getAccountID()
+	{
+		if (!$this->kid_header['kid']) self::getAccount();
+		return $this->kid_header['kid'];
+	}
+
+	public function setLogger($value = true)
+	{
+		switch (true) {
+			case is_bool($value):
+				break;
+			case is_callable($value):
+				break;
+			default:
+				throw new Exception('setLogger: invalid value provided');
+				break;
+		}
+		$this->logger = $value;
+	}
+
+	public function log($txt)
+	{
+		switch (true) {
+			case $this->logger === true:
+				error_log($txt);
+				break;
+			case $this->logger === false:
+				break;
+			default:
+				$fn = $this->logger;
+				$fn($txt);
+				break;
+		}
+	}
+
+	protected function create_ACME_Exception($type, $detail, $subproblems = array())
+	{
+		$this->log('ACME_Exception: ' . $detail . ' (' . $type . ')');
+		return new ACME_Exception($type, $detail, $subproblems);
+	}
+
+	protected function get_openssl_error()
+	{
+		$out = array();
+		$arr = error_get_last();
+		if (is_array($arr)) {
+			$out[] = $arr['message'];
+		}
+		$out[] = openssl_error_string();
+		return implode(' | ', $out);
+	}
+
+	protected function getAccount()
+	{
+		$this->log('Getting account info');
+		$ret = $this->request('newAccount', array('onlyReturnExisting' => true));
+		$this->log('Account info retrieved');
+		return $ret;
+	}
+
+	protected function keyAuthorization($token)
+	{
+		return $token . '.' . $this->thumbprint;
+	}
+
+	protected function readDirectory()
+	{
+		$this->log('Initializing ACME v2 environment: ' . $this->directory);
+		$ret = $this->http_request($this->directory); // Read ACME Directory
+		if (
+			!is_array($ret['body']) ||
+			!empty(array_diff_key(
+					array_flip(array('newNonce', 'newAccount', 'newOrder')),
+					$ret['body']
+				))
+		) {
+			throw new Exception('Failed to read directory: ' . $this->directory);
+		}
+		$this->resources = $ret['body']; // store resources for later use
+		$this->log('Initialized');
+	}
+
+	protected function request($type, $payload = '', $retry = false)
+	{
+		if (!$this->jwk_header) {
+			throw new Exception('use loadAccountKey to load an account key');
+		}
+
+		if (!$this->resources) $this->readDirectory();
+
+		if (0 === stripos($type, 'http')) {
+			$this->resources['_tmp'] = $type;
+			$type = '_tmp';
+		}
+
+		try {
+			$ret = $this->http_request($this->resources[$type], json_encode(
+				$this->jws_encapsulate($type, $payload)
+			));
+		} catch (ACME_Exception $e) { // retry previous request once, if replay-nonce expired/failed
+			if (!$retry && $e->getType() === 'urn:ietf:params:acme:error:badNonce') {
+				$this->log('Replay-Nonce expired, retrying previous request');
+				return $this->request($type, $payload, true);
+			}
+			if (!$retry && $e->getType() === 'urn:ietf:params:acme:error:rateLimited' && $this->delay_until !== null) {
+				return $this->request($type, $payload, true);
+			}
+			throw $e; // rethrow all other exceptions
+		}
+
+		if (!$this->kid_header['kid'] && $type === 'newAccount') {
+			$this->kid_header['kid'] = $ret['headers']['location'];
+			$this->log('AccountID: ' . $this->kid_header['kid']);
+		}
+
+		return $ret;
+	}
+
+	protected function jws_encapsulate($type, $payload, $is_inner_jws = false)
+	{ // RFC7515
+		if ($type === 'newAccount' || $is_inner_jws) {
+			$protected = $this->jwk_header;
+		} else {
+			$this->getAccountID();
+			$protected = $this->kid_header;
+		}
+
+		if (!$is_inner_jws) {
+			if (!$this->nonce) {
+				$ret = $this->http_request($this->resources['newNonce'], false);
+			}
+			$protected['nonce'] = $this->nonce;
+			$this->nonce = null;
+		}
+
+		if (!isset($this->resources[$type])) {
+			throw new Exception('Resource "' . $type . '" not available.');
+		}
+
+		$protected['url'] = $this->resources[$type];
+
+		$protected64 = $this->base64url(json_encode($protected, JSON_UNESCAPED_SLASHES));
+		$payload64 = $this->base64url(is_string($payload) ? $payload : json_encode($payload, JSON_UNESCAPED_SLASHES));
+
+		if (false === openssl_sign(
+			$protected64 . '.' . $payload64,
+			$signature,
+			$this->account_key,
+			'SHA' . $this->sha_bits
+		)) {
+			throw new Exception('Failed to sign payload !' . ' (' . $this->get_openssl_error() . ')');
+		}
+
+		return array(
+			'protected' => $protected64,
+			'payload' => $payload64,
+			'signature' => $this->base64url($this->jwk_header['alg'][0] == 'R' ? $signature : $this->asn2signature($signature, ceil($this->bits / 8)))
+		);
+	}
+
+	private function asn2signature($asn, $pad_len)
+	{
+		if ($asn[0] !== "\x30") throw new Exception('ASN.1 SEQUENCE not found !');
+		$asn = substr($asn, $asn[1] === "\x81" ? 3 : 2);
+		if ($asn[0] !== "\x02") throw new Exception('ASN.1 INTEGER 1 not found !');
+		$R = ltrim(substr($asn, 2, ord($asn[1])), "\x00");
+		$asn = substr($asn, ord($asn[1]) + 2);
+		if ($asn[0] !== "\x02") throw new Exception('ASN.1 INTEGER 2 not found !');
+		$S = ltrim(substr($asn, 2, ord($asn[1])), "\x00");
+		return str_pad($R, $pad_len, "\x00", STR_PAD_LEFT) . str_pad($S, $pad_len, "\x00", STR_PAD_LEFT);
+	}
+
+	protected function base64url($data)
+	{ // RFC7515 - Appendix C
+		return rtrim(strtr(base64_encode($data), '+/', '-_'), '=');
+	}
+
+	protected function base64url_decode($data)
+	{
+		return base64_decode(strtr($data, '-_', '+/'));
+	}
+
+	private function json_decode($str)
+	{
+		$ret = json_decode($str, true);
+		if ($ret === null) {
+			throw new Exception('Could not parse JSON: ' . $str);
+		}
+		return $ret;
+	}
+
+	protected function http_request($url, $data = null)
+	{
+		if ($this->ch === null) {
+			$this->ch = curl_init();
+		}
+
+		if ($this->delay_until !== null) {
+			$delta = $this->delay_until - time();
+			if ($delta > 0) {
+				$this->log('Delaying ' . $delta . 's (rate limit)');
+				sleep($delta);
+			}
+			$this->delay_until = null;
+		}
+
+		$method = $data === false ? 'HEAD' : ($data === null ? 'GET' : 'POST');
+		$user_agent = 'ACMECert v3.4.0 (+https://github.com/skoerfgen/ACMECert)';
+		$header = ($data === null || $data === false) ? array() : array('Content-Type: application/jose+json');
+
+		$headers = array();
+		curl_setopt_array($this->ch, array(
+			CURLOPT_URL => $url,
+			CURLOPT_FOLLOWLOCATION => true,
+			CURLOPT_RETURNTRANSFER => true,
+			CURLOPT_SSL_VERIFYPEER => false,
+			CURLOPT_SSL_VERIFYHOST => false,
+			CURLOPT_NOBODY => $data === false,
+			CURLOPT_USERAGENT => $user_agent,
+			CURLOPT_CUSTOMREQUEST => $method,
+			CURLOPT_HTTPHEADER => $header,
+			CURLOPT_POSTFIELDS => $data,
+			CURLOPT_HEADERFUNCTION => static function ($ch, $header) use (&$headers) {
+				$headers[] = $header;
+				return strlen($header);
+			}
+		));
+		
+		if ($this->proxy) {
+			curl_set_proxy($this->ch);
+        }
+
+		$took = microtime(true);
+		$body = curl_exec($this->ch);
+		$took = round(microtime(true) - $took, 2) . 's';
+		if ($body === false) throw new Exception('HTTP Request Error: ' . curl_error($this->ch));
+
+		$headers = array_reduce( // parse http response headers into array
+			array_filter($headers, function ($item) {
+				return trim($item) != '';
+			}),
+			function ($carry, $item) use (&$code) {
+				$parts = explode(':', $item, 2);
+				if (count($parts) === 1) {
+					list(, $code) = explode(' ', trim($item), 3);
+					$carry = array();
+				} else {
+					list($k, $v) = $parts;
+					$k = strtolower(trim($k));
+					switch ($k) {
+						case 'link':
+							if (preg_match('/<(.*)>\s*;\s*rel=\"(.*)\"/', $v, $matches)) {
+								$carry[$k][$matches[2]][] = trim($matches[1]);
+							}
+							break;
+						case 'content-type':
+							list($v) = explode(';', $v, 2);
+						default:
+							$carry[$k] = trim($v);
+							break;
+					}
+				}
+				return $carry;
+			},
+			array()
+		);
+		$this->log('  ' . $url . ' [' . $code . '] (' . $took . ')');
+
+		if (!empty($headers['replay-nonce'])) $this->nonce = $headers['replay-nonce'];
+
+		if (isset($headers['retry-after'])) {
+			if (is_numeric($headers['retry-after'])) {
+				$this->delay_until = time() + ceil($headers['retry-after']);
+			} else {
+				$this->delay_until = strtotime($headers['retry-after']);
+			}
+			$tmp = $this->delay_until - time();
+			// ignore delay if not in range 1s..5min
+			if ($tmp > 300 || $tmp < 1) $this->delay_until = null;
+		}
+
+		if (!empty($headers['content-type'])) {
+			switch ($headers['content-type']) {
+				case 'application/json':
+					if ($code[0] == '2') { // on non 2xx response: fall through to problem+json case
+						$body = $this->json_decode($body);
+						if (isset($body['error']) && !(isset($body['status']) && $body['status'] === 'valid')) {
+							$this->handleError($body['error']);
+						}
+						break;
+					}
+				case 'application/problem+json':
+					$body = $this->json_decode($body);
+					$this->handleError($body);
+					break;
+			}
+		}
+
+		if ($code[0] != '2') {
+			throw new Exception('Invalid HTTP-Status-Code received: ' . $code . ': ' . print_r($body, true));
+		}
+
+		$ret = array(
+			'code' => $code,
+			'headers' => $headers,
+			'body' => $body
+		);
+
+		return $ret;
+	}
+
+	private function handleError($error)
+	{
+		throw $this->create_ACME_Exception(
+			$error['type'],
+			$error['detail'],
+			array_map(function ($subproblem) {
+				return $this->create_ACME_Exception(
+					$subproblem['type'],
+					(isset($subproblem['identifier']['value']) ?
+						'"' . $subproblem['identifier']['value'] . '": ' :
+						''
+					) . $subproblem['detail']
+				);
+			}, isset($error['subproblems']) ? $error['subproblems'] : array())
+		);
+	}
+}

app/lib/cert/aliyun.php

@@ -0,0 +1,168 @@
+<?php
+
+namespace app\lib\cert;
+
+use app\lib\CertInterface;
+use app\lib\client\Aliyun as AliyunClient;
+use Exception;
+
+class aliyun implements CertInterface
+{
+    private $AccessKeyId;
+    private $AccessKeySecret;
+    private $Endpoint = 'cas.aliyuncs.com'; //API接入域名
+    private $Version = '2020-04-07'; //API版本号
+    private $config;
+    private $logger;
+    private AliyunClient $client;
+
+    public function __construct($config, $ext = null)
+    {
+        $this->AccessKeyId = $config['AccessKeyId'];
+        $this->AccessKeySecret = $config['AccessKeySecret'];
+        $proxy = isset($config['proxy']) ? $config['proxy'] == 1 : false;
+        $this->client = new AliyunClient($this->AccessKeyId, $this->AccessKeySecret, $this->Endpoint, $this->Version, $proxy);
+        $this->config = $config;
+    }
+
+    public function register()
+    {
+        if (empty($this->AccessKeyId) || empty($this->AccessKeySecret) || empty($this->config['username']) || empty($this->config['phone']) || empty($this->config['email'])) throw new Exception('必填参数不能为空');
+        $param = ['Action' => 'ListUserCertificateOrder'];
+        $this->request($param, true);
+        return true;
+    }
+
+    public function buyCert($domainList, &$order)
+    {
+        $param = ['Action' => 'DescribePackageState', 'ProductCode' => 'digicert-free-1-free'];
+        $data = $this->request($param, true);
+        if (!isset($data['TotalCount']) || $data['TotalCount'] == 0) throw new Exception('没有可用的免费证书资源包');
+        $this->log('证书资源包总数量:' . $data['TotalCount'] . ',已使用数量:' . $data['UsedCount']);
+    }
+
+    public function createOrder($domainList, &$order, $keytype, $keysize)
+    {
+        if (empty($domainList)) throw new Exception('域名列表不能为空');
+        $domain = $domainList[0];
+        $param = [
+            'Action' => 'CreateCertificateRequest',
+            'ProductCode' => 'digicert-free-1-free',
+            'Username' => $this->config['username'],
+            'Phone' => $this->config['phone'],
+            'Email' => $this->config['email'],
+            'Domain' => $domain,
+            'ValidateType' => 'DNS'
+        ];
+        $data = $this->request($param, true);
+        if (empty($data['OrderId'])) throw new Exception('证书申请失败，OrderId为空');
+        $order['OrderId'] = $data['OrderId'];
+
+        sleep(3);
+
+        $param = [
+            'Action' => 'DescribeCertificateState',
+            'OrderId' => $order['OrderId'],
+        ];
+        $data = $this->request($param, true);
+
+        $dnsList = [];
+        if ($data['Type'] == 'domain_verify') {
+            $mainDomain = getMainDomain($domain);
+            $name = str_replace('.' . $mainDomain, '', $data['RecordDomain']);
+            $dnsList[$mainDomain][] = ['name' => $name, 'type' => $data['RecordType'], 'value' => $data['RecordValue']];
+        }
+
+        return $dnsList;
+    }
+
+    public function authOrder($domainList, $order) {}
+
+    public function getAuthStatus($domainList, $order)
+    {
+        $param = [
+            'Action' => 'DescribeCertificateState',
+            'OrderId' => $order['OrderId'],
+        ];
+        $data = $this->request($param, true);
+        if ($data['Type'] == 'certificate') {
+            return true;
+        } elseif ($data['Type'] == 'verify_fail') {
+            throw new Exception('证书审核失败');
+        } else {
+            return false;
+        }
+    }
+
+    public function finalizeOrder($domainList, $order, $keytype, $keysize)
+    {
+        $param = [
+            'Action' => 'DescribeCertificateState',
+            'OrderId' => $order['OrderId'],
+        ];
+        $data = $this->request($param, true);
+        $fullchain = $data['Certificate'];
+        $private_key = $data['PrivateKey'];
+        if (empty($fullchain) || empty($private_key)) throw new Exception('证书内容获取失败');
+
+        $certInfo = openssl_x509_parse($fullchain, true);
+        if (!$certInfo) throw new Exception('证书解析失败');
+        return ['private_key' => $private_key, 'fullchain' => $fullchain, 'issuer' => $certInfo['issuer']['CN'], 'subject' => $certInfo['subject']['CN'], 'validFrom' => $certInfo['validFrom_time_t'], 'validTo' => $certInfo['validTo_time_t']];
+    }
+
+    public function revoke($order, $pem)
+    {
+        $param = [
+            'Action' => 'CancelCertificateForPackageRequest',
+            'OrderId' => $order['OrderId'],
+        ];
+        $this->request($param);
+    }
+
+    public function cancel($order)
+    {
+        $param = [
+            'Action' => 'DescribeCertificateState',
+            'OrderId' => $order['OrderId'],
+        ];
+        $data = $this->request($param, true);
+        if ($data['Type'] == 'domain_verify' || $data['Type'] == 'process') {
+            $param = [
+                'Action' => 'CancelOrderRequest',
+                'OrderId' => $order['OrderId'],
+            ];
+            $this->request($param);
+            usleep(500000);
+        }
+        if ($data['Type'] == 'domain_verify' || $data['Type'] == 'process' || $data['Type'] == 'payed' || $data['Type'] == 'verify_fail') {
+            $param = [
+                'Action' => 'DeleteCertificateRequest',
+                'OrderId' => $order['OrderId'],
+            ];
+            $this->request($param);
+        }
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+
+    private function request($param, $returnData = false)
+    {
+        $this->log('Request:' . json_encode($param, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES));
+        $result = $this->client->request($param);
+        $response = json_encode($result, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
+        if (!strpos($response, '"Type":"certificate"')) {
+            $this->log('Response:' . $response);
+        }
+        return $returnData ? $result : true;
+    }
+}

app/lib/cert/customacme.php

@@ -0,0 +1,114 @@
+<?php
+
+namespace app\lib\cert;
+
+use app\lib\CertInterface;
+use app\lib\acme\ACMECert;
+use Exception;
+
+class customacme implements CertInterface
+{
+    private $ac;
+    private $config;
+    private $ext;
+
+    public function __construct($config, $ext = null)
+    {
+        $this->config = $config;
+        $this->ac = new ACMECert($config['directory'], $config['proxy'] == 1);
+        if ($ext) {
+            $this->ext = $ext;
+            $this->ac->loadAccountKey($ext['key']);
+            $this->ac->setAccount($ext['kid']);
+        }
+    }
+
+    public function register()
+    {
+        if (empty($this->config['directory'])) throw new Exception('ACME地址不能为空');
+        if (empty($this->config['email'])) throw new Exception('邮件地址不能为空');
+
+        if (!empty($this->ext['key'])) {
+            if (!empty($this->config['kid']) && !empty($this->config['key'])) {
+                $kid = $this->ac->registerEAB(true, $this->config['kid'], $this->config['key'], $this->config['email']);
+            } else {
+                $kid = $this->ac->register(true, $this->config['email']);
+            }
+            return ['kid' => $kid, 'key' => $this->ext['key']];
+        }
+
+        $key = $this->ac->generateRSAKey(2048);
+        $this->ac->loadAccountKey($key);
+        if (!empty($this->config['kid']) && !empty($this->config['key'])) {
+            $kid = $this->ac->registerEAB(true, $this->config['kid'], $this->config['key'], $this->config['email']);
+        } else {
+            $kid = $this->ac->register(true, $this->config['email']);
+        }
+        return ['kid' => $kid, 'key' => $key];
+    }
+
+    public function buyCert($domainList, &$order) {}
+
+    public function createOrder($domainList, &$order, $keytype, $keysize)
+    {
+        $domain_config = [];
+        foreach ($domainList as $domain) {
+            if (empty($domain)) continue;
+            $domain_config[$domain] = ['challenge' => 'dns-01'];
+        }
+        if (empty($domain_config)) throw new Exception('域名列表不能为空');
+
+        $order = $this->ac->createOrder($domain_config);
+
+        $dnsList = [];
+        if (!empty($order['challenges'])) {
+            foreach ($order['challenges'] as $opts) {
+                $mainDomain = getMainDomain($opts['domain']);
+                $name = str_replace('.' . $mainDomain, '', $opts['key']);
+                $dnsList[$mainDomain][] = ['name' => $name, 'type' => 'TXT', 'value' => $opts['value']];
+            }
+        }
+
+        return $dnsList;
+    }
+
+    public function authOrder($domainList, $order)
+    {
+        $this->ac->authOrder($order);
+    }
+
+    public function getAuthStatus($domainList, $order)
+    {
+        return true;
+    }
+
+    public function finalizeOrder($domainList, $order, $keytype, $keysize)
+    {
+        if (empty($domainList)) throw new Exception('域名列表不能为空');
+
+        if ($keytype == 'ECC') {
+            if (empty($keysize)) $keysize = '384';
+            $private_key = $this->ac->generateECKey($keysize);
+        } else {
+            if (empty($keysize)) $keysize = '2048';
+            $private_key = $this->ac->generateRSAKey($keysize);
+        }
+        $fullchain = $this->ac->finalizeOrder($domainList, $order, $private_key);
+
+        $certInfo = openssl_x509_parse($fullchain, true);
+        if (!$certInfo) throw new Exception('证书解析失败');
+        return ['private_key' => $private_key, 'fullchain' => $fullchain, 'issuer' => $certInfo['issuer']['CN'], 'subject' => $certInfo['subject']['CN'], 'validFrom' => $certInfo['validFrom_time_t'], 'validTo' => $certInfo['validTo_time_t']];
+    }
+
+    public function revoke($order, $pem)
+    {
+        $this->ac->revoke($pem);
+    }
+
+    public function cancel($order) {}
+
+    public function setLogger($func)
+    {
+        $this->ac->setLogger($func);
+    }
+}

app/lib/cert/google.php

@@ -0,0 +1,118 @@
+<?php
+
+namespace app\lib\cert;
+
+use app\lib\CertInterface;
+use app\lib\acme\ACMECert;
+use Exception;
+
+class google implements CertInterface
+{
+    private $directories = array(
+        'live' => 'https://dv.acme-v02.api.pki.goog/directory',
+        'staging' => 'https://dv.acme-v02.test-api.pki.goog/directory'
+    );
+    private $ac;
+    private $config;
+    private $ext;
+
+    public function __construct($config, $ext = null)
+    {
+        $this->config = $config;
+        if (empty($config['mode'])) $config['mode'] = 'live';
+        $this->ac = new ACMECert($this->directories[$config['mode']], $config['proxy']==1);
+        if ($ext) {
+            $this->ext = $ext;
+            $this->ac->loadAccountKey($ext['key']);
+            $this->ac->setAccount($ext['kid']);
+        }
+    }
+
+    public function register()
+    {
+        if (empty($this->config['email'])) throw new Exception('邮件地址不能为空');
+        if (empty($this->config['kid']) || empty($this->config['key'])) throw new Exception('必填参数不能为空');
+
+        if (!empty($this->ext['key'])) {
+            $kid = $this->ac->registerEAB(true, $this->config['kid'], $this->config['key'], $this->config['email']);
+            return ['kid' => $kid, 'key' => $this->ext['key']];
+        }
+
+        $key = $this->ac->generateRSAKey(2048);
+        $this->ac->loadAccountKey($key);
+        $kid = $this->ac->registerEAB(true, $this->config['kid'], $this->config['key'], $this->config['email']);
+        return ['kid' => $kid, 'key' => $key];
+    }
+
+    public function buyCert($domainList, &$order)
+    {
+    }
+
+    public function createOrder($domainList, &$order, $keytype, $keysize)
+    {
+        $domain_config = [];
+        foreach ($domainList as $domain) {
+            if (empty($domain)) continue;
+            $domain_config[$domain] = ['challenge' => 'dns-01'];
+        }
+        if (empty($domain_config)) throw new Exception('域名列表不能为空');
+
+        $order = $this->ac->createOrder($domain_config);
+
+        $dnsList = [];
+        if (!empty($order['challenges'])) {
+            foreach ($order['challenges'] as $opts) {
+                $mainDomain = getMainDomain($opts['domain']);
+                $name = str_replace('.' . $mainDomain, '', $opts['key']);
+                /*if (!array_key_exists($mainDomain, $dnsList)) {
+                    $dnsList[$mainDomain][] = ['name' => '@', 'type' => 'CAA', 'value' => '0 issue "pki.goog"'];
+                }*/
+                $dnsList[$mainDomain][] = ['name' => $name, 'type' => 'TXT', 'value' => $opts['value']];
+            }
+        }
+
+        return $dnsList;
+    }
+
+    public function authOrder($domainList, $order)
+    {
+        $this->ac->authOrder($order);
+    }
+
+    public function getAuthStatus($domainList, $order)
+    {
+        return true;
+    }
+
+    public function finalizeOrder($domainList, $order, $keytype, $keysize)
+    {
+        if (empty($domainList)) throw new Exception('域名列表不能为空');
+
+        if ($keytype == 'ECC') {
+            if (empty($keysize)) $keysize = '384';
+            $private_key = $this->ac->generateECKey($keysize);
+        } else {
+            if (empty($keysize)) $keysize = '2048';
+            $private_key = $this->ac->generateRSAKey($keysize);
+        }
+        $fullchain = $this->ac->finalizeOrder($domainList, $order, $private_key);
+
+        $certInfo = openssl_x509_parse($fullchain, true);
+        if (!$certInfo) throw new Exception('证书解析失败');
+        return ['private_key' => $private_key, 'fullchain' => $fullchain, 'issuer' => $certInfo['issuer']['CN'], 'subject' => $certInfo['subject']['CN'], 'validFrom' => $certInfo['validFrom_time_t'], 'validTo' => $certInfo['validTo_time_t']];
+    }
+
+    public function revoke($order, $pem)
+    {
+        $this->ac->revoke($pem);
+    }
+
+    public function cancel($order)
+    {
+    }
+
+    public function setLogger($func)
+    {
+        $this->ac->setLogger($func);
+    }
+}

app/lib/cert/huoshan.php

@@ -0,0 +1,164 @@
+<?php
+
+namespace app\lib\cert;
+
+use app\lib\CertInterface;
+use app\lib\client\Volcengine;
+use Exception;
+
+class huoshan implements CertInterface
+{
+    private $AccessKeyId;
+    private $SecretAccessKey;
+    private $endpoint = "open.volcengineapi.com";
+    private $service = "certificate_service";
+    private $version = "2021-06-01";
+    private $region = "cn-north-1";
+    private $logger;
+    private Volcengine $client;
+
+    public function __construct($config = null, $ext = null)
+    {
+        $this->AccessKeyId = $config['AccessKeyId'];
+        $this->SecretAccessKey = $config['SecretAccessKey'];
+        $proxy = isset($config['proxy']) ? $config['proxy'] == 1 : false;
+        $this->client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, $this->endpoint, $this->service, $this->version, $this->region, $proxy);
+    }
+
+    public function register()
+    {
+        if (empty($this->AccessKeyId) || empty($this->SecretAccessKey)) throw new Exception('必填参数不能为空');
+        $this->request('GET', 'CertificateGetInstance', ['limit'=>1,'offset'=>0]);
+        return true;
+    }
+
+    public function buyCert($domainList, &$order)
+    {
+        $data = $this->request('GET', 'CertificateGetOrganization');
+        if(empty($data['content'])) throw new Exception('请先添加信息模板');
+        $order['organization_id'] = $data['content'][0]['id'];
+    }
+
+    public function createOrder($domainList, &$order, $keytype, $keysize)
+    {
+        if (empty($domainList)) throw new Exception('域名列表不能为空');
+        $domain = $domainList[0];
+        $param = [
+            'plan' => 'digicert_free_standard_dv',
+            'common_name' => $domain,
+            'organization_id' => $order['organization_id'],
+            'key_alg' => strtolower($keytype),
+            'validation_type' => 'dns_txt',
+        ];
+        $instance_id = $this->request('POST', 'QuickApplyCertificate', $param);
+        if(empty($instance_id)) throw new Exception('证书申请失败，证书实例ID为空');
+        $order['instance_id'] = $instance_id;
+
+        sleep(3);
+
+        $param = [
+            'instance_id' => $instance_id,
+        ];
+        $data = $this->request('GET', 'CertificateGetDcvParam', $param);
+
+        $dnsList = [];
+        if (!empty($data['domains_to_be_validated'])) {
+            $type = $data['validation_type'] == 'dns_cname' ? 'CNAME' : 'TXT';
+            foreach ($data['domains_to_be_validated'] as $opts) {
+                $mainDomain = getMainDomain($domain);
+                $name = str_replace('.' . $mainDomain, '', $opts['validation_domain']);
+                $dnsList[$mainDomain][] = ['name' => $name, 'type' => $type, 'value' => $opts['value']];
+            }
+        }
+        return $dnsList;
+    }
+
+    public function authOrder($domainList, $order)
+    {
+        $query = [
+            'instance_id' => $order['instance_id'],
+        ];
+        $param = [
+            'action' => '',
+        ];
+        $this->request('POST', 'CertificateProgressInstanceOrder', $param, $query);
+    }
+
+    public function getAuthStatus($domainList, $order)
+    {
+        $param = [
+            'instance_id' => $order['instance_id'],
+        ];
+        $data = $this->request('GET', 'CertificateGetInstance', $param);
+        if(empty($data['content'])) throw new Exception('证书信息获取失败');
+        $data = $data['content'][0];
+        if($data['order_status'] == 300 && $data['certificate_exist'] == 1){
+            return true;
+        }elseif($data['order_status'] == 302){
+            throw new Exception('证书申请失败');
+        }else{
+            return false;
+        }
+    }
+
+    public function finalizeOrder($domainList, $order, $keytype, $keysize)
+    {
+        $param = [
+            'instance_id' => $order['instance_id'],
+        ];
+        $data = $this->request('GET', 'CertificateGetInstance', $param);
+        if (empty($data['content'])) throw new Exception('证书信息获取失败');
+        $data = $data['content'][0];
+        if (!isset($data['ssl']['certificate']['chain'])) throw new Exception('证书内容获取失败');
+
+        $fullchain = implode('', $data['ssl']['certificate']['chain']);
+        $private_key = $data['ssl']['certificate']['private_key'];
+
+        return ['private_key' => $private_key, 'fullchain' => $fullchain, 'issuer' => $data['issuer'], 'subject' => $data['common_name']['CN'], 'validFrom' => intval($data['certificate_not_before_ms']/1000), 'validTo' => intval($data['certificate_not_after_ms']/1000)];
+    }
+
+    public function revoke($order, $pem)
+    {
+        $query = [
+            'instance_id' => $order['instance_id'],
+        ];
+        $param = [
+            'action' => 'revoke',
+            'reason' => '关联域名错误',
+        ];
+        $this->request('POST', 'CertificateProgressInstanceOrder', $param, $query);
+    }
+
+    public function cancel($order)
+    {
+        $query = [
+            'instance_id' => $order['instance_id'],
+        ];
+        $param = [
+            'action' => 'cancel',
+        ];
+        $this->request('POST', 'CertificateProgressInstanceOrder', $param, $query);
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+	{
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+	}
+
+    private function request($method, $action, $params = [], $query = [])
+    {
+        $this->log('Action:'.$action.PHP_EOL.'Request:'.json_encode($params, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES));
+        $result = $this->client->request($method, $action, $params, $query);
+        if (is_array($result)) {
+            $this->log('Response:'.json_encode($result, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES));
+        }
+        return $result;
+    }
+}

app/lib/cert/letsencrypt.php

@@ -0,0 +1,113 @@
+<?php
+
+namespace app\lib\cert;
+
+use app\lib\CertInterface;
+use app\lib\acme\ACMECert;
+use Exception;
+
+class letsencrypt implements CertInterface
+{
+    private $directories = array(
+        'live' => 'https://acme-v02.api.letsencrypt.org/directory',
+        'staging' => 'https://acme-staging-v02.api.letsencrypt.org/directory'
+    );
+    private $ac;
+    private $config;
+    private $ext;
+
+    public function __construct($config, $ext = null)
+    {
+        $this->config = $config;
+        if (empty($config['mode'])) $config['mode'] = 'live';
+        $this->ac = new ACMECert($this->directories[$config['mode']], $config['proxy'] == 1);
+        if ($ext) {
+            $this->ext = $ext;
+            $this->ac->loadAccountKey($ext['key']);
+            $this->ac->setAccount($ext['kid']);
+        }
+    }
+
+    public function register()
+    {
+        if (empty($this->config['email'])) throw new Exception('邮件地址不能为空');
+
+        if (!empty($this->ext['key'])) {
+            $kid = $this->ac->register(true, $this->config['email']);
+            return ['kid' => $kid, 'key' => $this->ext['key']];
+        }
+
+        $key = $this->ac->generateRSAKey(2048);
+        $this->ac->loadAccountKey($key);
+        $kid = $this->ac->register(true, $this->config['email']);
+        return ['kid' => $kid, 'key' => $key];
+    }
+
+    public function buyCert($domainList, &$order) {}
+
+    public function createOrder($domainList, &$order, $keytype, $keysize)
+    {
+        $domain_config = [];
+        foreach ($domainList as $domain) {
+            if (empty($domain)) continue;
+            $domain_config[$domain] = ['challenge' => 'dns-01'];
+        }
+        if (empty($domain_config)) throw new Exception('域名列表不能为空');
+
+        $order = $this->ac->createOrder($domain_config);
+
+        $dnsList = [];
+        if (!empty($order['challenges'])) {
+            foreach ($order['challenges'] as $opts) {
+                $mainDomain = getMainDomain($opts['domain']);
+                $name = str_replace('.' . $mainDomain, '', $opts['key']);
+                /*if (!array_key_exists($mainDomain, $dnsList)) {
+                    $dnsList[$mainDomain][] = ['name' => '@', 'type' => 'CAA', 'value' => '0 issue "letsencrypt.org"'];
+                }*/
+                $dnsList[$mainDomain][] = ['name' => $name, 'type' => 'TXT', 'value' => $opts['value']];
+            }
+        }
+
+        return $dnsList;
+    }
+
+    public function authOrder($domainList, $order)
+    {
+        $this->ac->authOrder($order);
+    }
+
+    public function getAuthStatus($domainList, $order)
+    {
+        return true;
+    }
+
+    public function finalizeOrder($domainList, $order, $keytype, $keysize)
+    {
+        if (empty($domainList)) throw new Exception('域名列表不能为空');
+
+        if ($keytype == 'ECC') {
+            if (empty($keysize)) $keysize = '384';
+            $private_key = $this->ac->generateECKey($keysize);
+        } else {
+            if (empty($keysize)) $keysize = '2048';
+            $private_key = $this->ac->generateRSAKey($keysize);
+        }
+        $fullchain = $this->ac->finalizeOrder($domainList, $order, $private_key);
+
+        $certInfo = openssl_x509_parse($fullchain, true);
+        if (!$certInfo) throw new Exception('证书解析失败');
+        return ['private_key' => $private_key, 'fullchain' => $fullchain, 'issuer' => $certInfo['issuer']['CN'], 'subject' => $certInfo['subject']['CN'], 'validFrom' => $certInfo['validFrom_time_t'], 'validTo' => $certInfo['validTo_time_t']];
+    }
+
+    public function revoke($order, $pem)
+    {
+        $this->ac->revoke($pem);
+    }
+
+    public function cancel($order) {}
+
+    public function setLogger($func)
+    {
+        $this->ac->setLogger($func);
+    }
+}

app/lib/cert/tencent.php

@@ -0,0 +1,190 @@
+<?php
+
+namespace app\lib\cert;
+
+use app\lib\CertInterface;
+use app\lib\client\TencentCloud;
+use Exception;
+
+class tencent implements CertInterface
+{
+    private $SecretId;
+    private $SecretKey;
+    private $email;
+    private $endpoint = "ssl.tencentcloudapi.com";
+    private $service = "ssl";
+    private $version = "2019-12-05";
+    private $logger;
+    private TencentCloud $client;
+
+    public function __construct($config, $ext = null)
+    {
+        $this->SecretId = $config['SecretId'];
+        $this->SecretKey = $config['SecretKey'];
+        $proxy = isset($config['proxy']) ? $config['proxy'] == 1 : false;
+        $this->client = new TencentCloud($this->SecretId, $this->SecretKey, $this->endpoint, $this->service, $this->version, null, $proxy);
+        $this->email = $config['email'];
+    }
+
+    public function register()
+    {
+        if (empty($this->SecretId) || empty($this->SecretKey) || empty($this->email)) throw new Exception('必填参数不能为空');
+        $this->request('DescribeCertificates', []);
+        return true;
+    }
+
+    public function buyCert($domainList, &$order) {}
+
+    public function createOrder($domainList, &$order, $keytype, $keysize)
+    {
+        if (empty($domainList)) throw new Exception('域名列表不能为空');
+        $domain = $domainList[0];
+        $param = [
+            'DvAuthMethod' => 'DNS',
+            'DomainName' => $domain,
+            'ContactEmail' => $this->email,
+            'CsrEncryptAlgo' => $keytype,
+            'CsrKeyParameter' => $keytype == 'ECC' ? 'prime256v1' : '2048',
+        ];
+        $data = $this->request('ApplyCertificate', $param);
+        if (empty($data['CertificateId'])) throw new Exception('证书申请失败，CertificateId为空');
+        $order['CertificateId'] = $data['CertificateId'];
+
+        $param = [
+            'CertificateId' => $order['CertificateId'],
+        ];
+        $data = $this->request('DescribeCertificate', $param);
+        $order['OrderId'] = $data['OrderId'];
+
+        $dnsList = [];
+        if (!empty($data['DvAuthDetail']['DvAuths'])) {
+            foreach ($data['DvAuthDetail']['DvAuths'] as $opts) {
+                $mainDomain = $opts['DvAuthDomain'];
+                $dnsList[$mainDomain][] = ['name' => $opts['DvAuthSubDomain'], 'type' => $opts['DvAuthVerifyType'] ?? 'CNAME', 'value' => $opts['DvAuthValue']];
+            }
+        }
+
+        return $dnsList;
+    }
+
+    public function authOrder($domainList, $order)
+    {
+        $param = [
+            'CertificateId' => $order['CertificateId'],
+        ];
+        $data = $this->request('DescribeCertificate', $param);
+        if ($data['Status'] == 0 || $data['Status'] == 4) {
+            $this->request('CompleteCertificate', $param);
+            sleep(3);
+        }
+    }
+
+    public function getAuthStatus($domainList, $order)
+    {
+        $param = [
+            'CertificateId' => $order['CertificateId'],
+        ];
+        $data = $this->request('DescribeCertificate', $param);
+        if ($data['Status'] == 1) {
+            return true;
+        } elseif ($data['Status'] == 2) {
+            throw new Exception('证书审核失败' . (empty($data['StatusMsg'] ? '' : ':' . $data['StatusMsg'])));
+        } else {
+            return false;
+        }
+    }
+
+    public function finalizeOrder($domainList, $order, $keytype, $keysize)
+    {
+        if (!is_dir(app()->getRuntimePath() . 'cert')) mkdir(app()->getRuntimePath() . 'cert');
+        $param = [
+            'CertificateId' => $order['CertificateId'],
+            'ServiceType' => 'nginx',
+        ];
+        $data = $this->request('DescribeDownloadCertificateUrl', $param);
+        $file_data = get_curl($data['DownloadCertificateUrl']);
+        $file_path = app()->getRuntimePath() . 'cert/' . $data['DownloadFilename'];
+        $file_name = substr($data['DownloadFilename'], 0, -4);
+        file_put_contents($file_path, $file_data);
+
+        $zip = new \ZipArchive;
+        if ($zip->open($file_path) === true) {
+            $zip->extractTo(app()->getRuntimePath() . 'cert/');
+            $zip->close();
+        } else {
+            throw new Exception('解压证书失败');
+        }
+        $cert_dir = app()->getRuntimePath() . 'cert/' . $file_name;
+
+        $items = scandir($cert_dir);
+        if ($items === false) throw new Exception('解压后的证书文件夹不存在');
+        $private_key = null;
+        $fullchain = null;
+        foreach ($items as $item) {
+            if (substr($item, -4) == '.key') {
+                $private_key = file_get_contents($cert_dir . '/' . $item);
+            } elseif (substr($item, -4) == '.crt') {
+                $fullchain = file_get_contents($cert_dir . '/' . $item);
+            }
+        }
+        if (empty($private_key) || empty($fullchain)) throw new Exception('解压后的证书文件夹内未找到证书文件');
+
+        clearDirectory($cert_dir);
+        rmdir($cert_dir);
+        unlink($file_path);
+
+        $certInfo = openssl_x509_parse($fullchain, true);
+        if (!$certInfo) throw new Exception('证书解析失败');
+        return ['private_key' => $private_key, 'fullchain' => $fullchain, 'issuer' => $certInfo['issuer']['CN'], 'subject' => $certInfo['subject']['CN'], 'validFrom' => $certInfo['validFrom_time_t'], 'validTo' => $certInfo['validTo_time_t']];
+    }
+
+    public function revoke($order, $pem)
+    {
+        $param = [
+            'CertificateId' => $order['CertificateId'],
+        ];
+        $action = 'RevokeCertificate';
+        $data = $this->request($action, $param);
+
+        if (!empty($data['RevokeDomainValidateAuths'])) {
+            $dnsList = [];
+            foreach ($data['RevokeDomainValidateAuths'] as $opts) {
+                $mainDomain = getMainDomain($opts['DomainValidateAuthDomain']);
+                $name = str_replace('.' . $mainDomain, '', $opts['DomainValidateAuthKey']);
+                $dnsList[$mainDomain][] = ['name' => $name, 'type' => 'CNAME', 'value' => $opts['DomainValidateAuthValue']];
+            }
+            \app\utils\CertDnsUtils::addDns($dnsList, function ($txt) {
+                $this->log($txt);
+            });
+        }
+    }
+
+    public function cancel($order)
+    {
+        $param = [
+            'CertificateId' => $order['CertificateId'],
+        ];
+        $action = 'CancelAuditCertificate';
+        $this->request($action, $param);
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+
+    private function request($action, $param)
+    {
+        $this->log('Action:' . $action . PHP_EOL . 'Request:' . json_encode($param, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES));
+        $result = $this->client->request($action, $param);
+        $this->log('Response:' . json_encode($result, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES));
+        return $result;
+    }
+}

app/lib/cert/ucloud.php

@@ -0,0 +1,187 @@
+<?php
+
+namespace app\lib\cert;
+
+use app\lib\CertInterface;
+use app\lib\client\Ucloud as UcloudClient;
+use Exception;
+
+class ucloud implements CertInterface
+{
+    private $PublicKey;
+    private $PrivateKey;
+    private $config;
+    private $logger;
+    private UcloudClient $client;
+
+    public function __construct($config, $ext = null)
+    {
+        $this->PublicKey = $config['PublicKey'];
+        $this->PrivateKey = $config['PrivateKey'];
+        $this->client = new UcloudClient($this->PublicKey, $this->PrivateKey);
+        $this->config = $config;
+    }
+
+    public function register()
+    {
+        if (empty($this->PublicKey) || empty($this->PrivateKey) || empty($this->config['username']) || empty($this->config['phone']) || empty($this->config['email'])) throw new Exception('必填参数不能为空');
+        $param = ['Mode' => 'free'];
+        $this->request('GetCertificateList', $param);
+        return true;
+    }
+
+    public function buyCert($domainList, &$order)
+    {
+        $param = [
+            'CertificateBrand' => 'TrustAsia',
+            'CertificateName' => 'TrustAsiaC1DVFree',
+            'DomainsCount' => 1,
+            'ValidYear' => 1,
+        ];
+        $data = $this->request('PurchaseCertificate', $param);
+        if (!isset($data['CertificateID'])) throw new Exception('证书购买失败，CertificateID为空');
+        $order['CertificateID'] = $data['CertificateID'];
+    }
+
+    public function createOrder($domainList, &$order, $keytype, $keysize)
+    {
+        if (empty($domainList)) throw new Exception('域名列表不能为空');
+        $domain = $domainList[0];
+        $param = [
+            'CertificateID' => $order['CertificateID'],
+            'Domains' => $domain,
+            'CSROnline' => 1,
+            'CSREncryptAlgo' => ['RSA' => 'RSA', 'ECC' => 'ECDSA'][$keytype],
+            'CSRKeyParameter' => ['2048' => '2048', '3072' => '3072', '256' => 'prime256v1', '384' => 'prime384v1'][$keysize],
+            'CompanyName' => '公司名称',
+            'CompanyAddress' => '公司地址',
+            'CompanyRegion' => '北京',
+            'CompanyCity' => '北京',
+            'CompanyCountry' => 'CN',
+            'CompanyDivision' => '部门',
+            'CompanyPhone' => $this->config['phone'],
+            'CompanyPostalCode' => '110100',
+            'AdminName' => $this->config['username'],
+            'AdminPhone' => $this->config['phone'],
+            'AdminEmail' => $this->config['email'],
+            'AdminTitle' => '职员',
+            'DVAuthMethod' => 'DNS'
+        ];
+        $data = $this->request('ComplementCSRInfo', $param);
+
+        sleep(3);
+
+        $param = [
+            'CertificateID' => $order['CertificateID'],
+        ];
+        $data = $this->request('GetDVAuthInfo', $param);
+
+        $dnsList = [];
+        if (!empty($data['Auths'])) {
+            foreach ($data['Auths'] as $auth) {
+                $mainDomain = getMainDomain($auth['Domain']);
+                $dnsList[$mainDomain][] = ['name' => $auth['AuthRecord'], 'type' => $auth['AuthType'] == 'DNS_TXT' ? 'TXT' : 'CNAME', 'value' => $auth['AuthValue']];
+            }
+        }
+        return $dnsList;
+    }
+
+    public function authOrder($domainList, $order) {}
+
+    public function getAuthStatus($domainList, $order)
+    {
+        $param = [
+            'CertificateID' => $order['CertificateID'],
+        ];
+        $data = $this->request('GetCertificateDetailInfo', $param);
+        if ($data['CertificateInfo']['StateCode'] == 'COMPLETED' || $data['CertificateInfo']['StateCode'] == 'RENEWED') {
+            return true;
+        } elseif ($data['CertificateInfo']['StateCode'] == 'REJECTED' || $data['CertificateInfo']['StateCode'] == 'SECURITY_REVIEW_FAILED') {
+            throw new Exception('证书审核失败:' . $data['CertificateInfo']['State']);
+        } else {
+            return false;
+        }
+    }
+
+    public function finalizeOrder($domainList, $order, $keytype, $keysize)
+    {
+        if (!is_dir(app()->getRuntimePath() . 'cert')) mkdir(app()->getRuntimePath() . 'cert');
+        $param = [
+            'CertificateID' => $order['CertificateID'],
+        ];
+        $info = $this->request('GetCertificateDetailInfo', $param);
+
+        $data = $this->request('DownloadCertificate', $param);
+        $file_data = get_curl($data['CertificateUrl']);
+        $file_path = app()->getRuntimePath() . 'cert/USSL_' . $order['CertificateID'] . '.zip';
+        file_put_contents($file_path, $file_data);
+
+        $zip = new \ZipArchive;
+        if ($zip->open($file_path) === true) {
+            $zip->extractTo(app()->getRuntimePath() . 'cert/');
+            $zip->close();
+        } else {
+            throw new Exception('解压证书失败');
+        }
+        $cert_dir = app()->getRuntimePath() . 'cert/Nginx';
+
+        $items = scandir($cert_dir);
+        if ($items === false) throw new Exception('解压后的证书文件夹不存在');
+        $private_key = null;
+        $fullchain = null;
+        foreach ($items as $item) {
+            if (substr($item, -4) == '.key') {
+                $private_key = file_get_contents($cert_dir . '/' . $item);
+            } elseif (substr($item, -4) == '.pem') {
+                $fullchain = file_get_contents($cert_dir . '/' . $item);
+            }
+        }
+        if (empty($private_key) || empty($fullchain)) throw new Exception('解压后的证书文件夹内未找到证书文件');
+
+        clearDirectory(app()->getRuntimePath() . 'cert');
+
+        return ['private_key' => $private_key, 'fullchain' => $fullchain, 'issuer' => $info['CertificateInfo']['CaOrganization'], 'subject' => $info['CertificateInfo']['Name'], 'validFrom' => $info['CertificateInfo']['IssuedDate'], 'validTo' => $info['CertificateInfo']['ExpiredDate']];
+    }
+
+    public function revoke($order, $pem)
+    {
+        $param = [
+            'CertificateID' => $order['CertificateID'],
+            'Reason' => '业务终止',
+        ];
+        $this->request('RevokeCertificate', $param);
+    }
+
+    public function cancel($order)
+    {
+        $param = [
+            'CertificateID' => $order['CertificateID'],
+        ];
+        $this->request('CancelCertificateOrder', $param);
+
+        sleep(1);
+
+        $param['CertificateMode'] = 'purchase';
+        $this->request('DeleteSSLCertificate', $param);
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+
+    private function request($action, $params)
+    {
+        $this->log('Action:' . $action . PHP_EOL . 'Request:' . json_encode($params, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES));
+        $result = $this->client->request($action, $params);
+        $this->log('Response:' . json_encode($result, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES));
+        return $result;
+    }
+}

app/lib/cert/zerossl.php

@@ -0,0 +1,110 @@
+<?php
+
+namespace app\lib\cert;
+
+use app\lib\CertInterface;
+use app\lib\acme\ACMECert;
+use Exception;
+
+class zerossl implements CertInterface
+{
+    private $directory = 'https://acme.zerossl.com/v2/DV90';
+    private $ac;
+    private $config;
+    private $ext;
+
+    public function __construct($config, $ext = null)
+    {
+        $this->config = $config;
+        $this->ac = new ACMECert($this->directory, $config['proxy'] == 1);
+        if ($ext) {
+            $this->ext = $ext;
+            $this->ac->loadAccountKey($ext['key']);
+            $this->ac->setAccount($ext['kid']);
+        }
+    }
+
+    public function register()
+    {
+        if (empty($this->config['email'])) throw new Exception('邮件地址不能为空');
+        if (empty($this->config['kid']) || empty($this->config['key'])) throw new Exception('必填参数不能为空');
+
+        if (!empty($this->ext['key'])) {
+            $kid = $this->ac->registerEAB(true, $this->config['kid'], $this->config['key'], $this->config['email']);
+            return ['kid' => $kid, 'key' => $this->ext['key']];
+        }
+
+        $key = $this->ac->generateRSAKey(2048);
+        $this->ac->loadAccountKey($key);
+        $kid = $this->ac->registerEAB(true, $this->config['kid'], $this->config['key'], $this->config['email']);
+        return ['kid' => $kid, 'key' => $key];
+    }
+
+    public function buyCert($domainList, &$order) {}
+
+    public function createOrder($domainList, &$order, $keytype, $keysize)
+    {
+        $domain_config = [];
+        foreach ($domainList as $domain) {
+            if (empty($domain)) continue;
+            $domain_config[$domain] = ['challenge' => 'dns-01'];
+        }
+        if (empty($domain_config)) throw new Exception('域名列表不能为空');
+
+        $order = $this->ac->createOrder($domain_config);
+
+        $dnsList = [];
+        if (!empty($order['challenges'])) {
+            foreach ($order['challenges'] as $opts) {
+                $mainDomain = getMainDomain($opts['domain']);
+                $name = str_replace('.' . $mainDomain, '', $opts['key']);
+                /*if (!array_key_exists($mainDomain, $dnsList)) {
+                    $dnsList[$mainDomain][] = ['name' => '@', 'type' => 'CAA', 'value' => '0 issue "sectigo.com"'];
+                }*/
+                $dnsList[$mainDomain][] = ['name' => $name, 'type' => 'TXT', 'value' => $opts['value']];
+            }
+        }
+
+        return $dnsList;
+    }
+
+    public function authOrder($domainList, $order)
+    {
+        $this->ac->authOrder($order);
+    }
+
+    public function getAuthStatus($domainList, $order)
+    {
+        return true;
+    }
+
+    public function finalizeOrder($domainList, $order, $keytype, $keysize)
+    {
+        if (empty($domainList)) throw new Exception('域名列表不能为空');
+
+        if ($keytype == 'ECC') {
+            if (empty($keysize)) $keysize = '384';
+            $private_key = $this->ac->generateECKey($keysize);
+        } else {
+            if (empty($keysize)) $keysize = '2048';
+            $private_key = $this->ac->generateRSAKey($keysize);
+        }
+        $fullchain = $this->ac->finalizeOrder($domainList, $order, $private_key);
+
+        $certInfo = openssl_x509_parse($fullchain, true);
+        if (!$certInfo) throw new Exception('证书解析失败');
+        return ['private_key' => $private_key, 'fullchain' => $fullchain, 'issuer' => $certInfo['issuer']['CN'], 'subject' => $certInfo['subject']['CN'], 'validFrom' => $certInfo['validFrom_time_t'], 'validTo' => $certInfo['validTo_time_t']];
+    }
+
+    public function revoke($order, $pem)
+    {
+        $this->ac->revoke($pem);
+    }
+
+    public function cancel($order) {}
+
+    public function setLogger($func)
+    {
+        $this->ac->setLogger($func);
+    }
+}

app/lib/client/AWS.php

@@ -0,0 +1,347 @@
+<?php
+
+namespace app\lib\client;
+
+use Exception;
+
+/**
+ * AWS
+ */
+class AWS
+{
+    private $AccessKeyId;
+    private $SecretAccessKey;
+    private $endpoint;
+    private $service;
+    private $version;
+    private $region;
+    private $etag;
+    private $proxy = false;
+
+    public function __construct($AccessKeyId, $SecretAccessKey, $endpoint, $service, $version, $region, $proxy = false)
+    {
+        $this->AccessKeyId = $AccessKeyId;
+        $this->SecretAccessKey = $SecretAccessKey;
+        $this->endpoint = $endpoint;
+        $this->service = $service;
+        $this->version = $version;
+        $this->region = $region;
+        $this->proxy = $proxy;
+    }
+
+    /**
+     * @param string $method 请求方法
+     * @param string $action 方法名称
+     * @param array $params 请求参数
+     * @return array
+     * @throws Exception
+     */
+    public function request($method, $action, $params = [])
+    {
+        if (!empty($params)) {
+            $params = array_filter($params, function ($a) {
+                return $a !== null;
+            });
+        }
+
+        $body = '';
+        $query = [];
+        if ($method == 'GET' || $method == 'DELETE') {
+            $query = $params;
+        } else {
+            $body = !empty($params) ? json_encode($params) : '';
+        }
+
+        $time = time();
+        $date = gmdate("Ymd\THis\Z", $time);
+        $headers = [
+            'Host' => $this->endpoint,
+            'X-Amz-Target' => $action,
+            'X-Amz-Date' => $date,
+            //'X-Amz-Content-Sha256' => hash("sha256", $body),
+        ];
+        if ($body) {
+            $headers['Content-Type'] = 'application/x-amz-json-1.1';
+        }
+        $path = '/';
+
+        $authorization = $this->generateSign($method, $path, $query, $headers, $body, $date);
+        $headers['Authorization'] = $authorization;
+
+        $url = 'https://' . $this->endpoint . $path;
+        if (!empty($query)) {
+            $url .= '?' . http_build_query($query);
+        }
+        $header = [];
+        foreach ($headers as $key => $value) {
+            $header[] = $key . ': ' . $value;
+        }
+        return $this->curl($method, $url, $body, $header);
+    }
+
+    /**
+     * @param string $method 请求方法
+     * @param string $action 方法名称
+     * @param array $params 请求参数
+     * @return array
+     * @throws Exception
+     */
+    public function requestXml($method, $action, $params = [])
+    {
+        if (!empty($params)) {
+            $params = array_filter($params, function ($a) {
+                return $a !== null;
+            });
+        }
+
+        $body = '';
+        $query = [
+            'Action' => $action,
+            'Version' => $this->version,
+        ];
+        if ($method == 'GET' || $method == 'DELETE') {
+            $query = array_merge($query, $params);
+        } else {
+            $body = !empty($params) ? http_build_query($params) : '';
+        }
+
+        $time = time();
+        $date = gmdate("Ymd\THis\Z", $time);
+        $headers = [
+            'Host' => $this->endpoint,
+            'X-Amz-Date' => $date,
+        ];
+
+        $path = '/';
+        $authorization = $this->generateSign($method, $path, $query, $headers, $body, $date);
+        $headers['Authorization'] = $authorization;
+
+        $url = 'https://' . $this->endpoint . $path;
+        if (!empty($query)) {
+            $url .= '?' . http_build_query($query);
+        }
+        $header = [];
+        foreach ($headers as $key => $value) {
+            $header[] = $key . ': ' . $value;
+        }
+        return $this->curl($method, $url, $body, $header, true);
+    }
+
+    /**
+     * @param string $method 请求方法
+     * @param string $path 请求路径
+     * @param array $params 请求参数
+     * @param \SimpleXMLElement $xml 请求XML
+     * @return array
+     * @throws Exception
+     */
+    public function requestXmlN($method, $path, $params = [], $xml = null, $etag = false)
+    {
+        if (!empty($params)) {
+            $params = array_filter($params, function ($a) {
+                return $a !== null;
+            });
+        }
+
+        $path = '/' . $this->version . $path;
+        $body = '';
+        if ($method == 'GET' || $method == 'DELETE') {
+            $query = $params;
+        } else {
+            $body = !empty($params) ? $this->array2xml($params, $xml) : '';
+        }
+
+        $time = time();
+        $date = gmdate("Ymd\THis\Z", $time);
+        $headers = [
+            'Host' => $this->endpoint,
+            'X-Amz-Date' => $date,
+            //'X-Amz-Content-Sha256' => hash("sha256", $body),
+        ];
+        if ($this->etag) {
+            $headers['If-Match'] = $this->etag;
+        }
+
+        $authorization = $this->generateSign($method, $path, $query, $headers, $body, $date);
+        $headers['Authorization'] = $authorization;
+
+        $url = 'https://' . $this->endpoint . $path;
+        if (!empty($query)) {
+            $url .= '?' . http_build_query($query);
+        }
+        $header = [];
+        foreach ($headers as $key => $value) {
+            $header[] = $key . ': ' . $value;
+        }
+        return $this->curl($method, $url, $body, $header, true, $etag);
+    }
+
+    private function generateSign($method, $path, $query, $headers, $body, $date)
+    {
+        $algorithm = "AWS4-HMAC-SHA256";
+
+        // step 1: build canonical request string
+        $httpRequestMethod = $method;
+        $canonicalUri = $this->getCanonicalURI($path);
+        $canonicalQueryString = $this->getCanonicalQueryString($query);
+        [$canonicalHeaders, $signedHeaders] = $this->getCanonicalHeaders($headers);
+        $hashedRequestPayload = hash("sha256", $body);
+        $canonicalRequest = $httpRequestMethod . "\n"
+            . $canonicalUri . "\n"
+            . $canonicalQueryString . "\n"
+            . $canonicalHeaders . "\n"
+            . $signedHeaders . "\n"
+            . $hashedRequestPayload;
+
+        // step 2: build string to sign
+        $shortDate = substr($date, 0, 8);
+        $credentialScope = $shortDate . '/' . $this->region . '/' . $this->service . '/aws4_request';
+        $hashedCanonicalRequest = hash("sha256", $canonicalRequest);
+        $stringToSign = $algorithm . "\n"
+            . $date . "\n"
+            . $credentialScope . "\n"
+            . $hashedCanonicalRequest;
+
+        // step 3: sign string
+        $kDate = hash_hmac("sha256", $shortDate, 'AWS4' . $this->SecretAccessKey, true);
+        $kRegion = hash_hmac("sha256", $this->region, $kDate, true);
+        $kService = hash_hmac("sha256", $this->service, $kRegion, true);
+        $kSigning = hash_hmac("sha256", "aws4_request", $kService, true);
+        $signature = hash_hmac("sha256", $stringToSign, $kSigning);
+
+        // step 4: build authorization
+        $credential = $this->AccessKeyId . '/' . $credentialScope;
+        $authorization = $algorithm . ' Credential=' . $credential . ", SignedHeaders=" . $signedHeaders . ", Signature=" . $signature;
+
+        return $authorization;
+    }
+
+    private function escape($str)
+    {
+        $search = ['+', '*', '%7E'];
+        $replace = ['%20', '%2A', '~'];
+        return str_replace($search, $replace, urlencode($str));
+    }
+    
+    private function getCanonicalURI($path)
+    {
+        if (empty($path)) return '/';
+        $pattens = explode('/', $path);
+        $pattens = array_map(function ($item) {
+            return $this->escape($item);
+        }, $pattens);
+        $canonicalURI = implode('/', $pattens);
+        return $canonicalURI;
+    }
+
+    private function getCanonicalQueryString($parameters)
+    {
+        if (empty($parameters)) return '';
+        ksort($parameters);
+        $canonicalQueryString = '';
+        foreach ($parameters as $key => $value) {
+            $canonicalQueryString .= '&' . $this->escape($key) . '=' . $this->escape($value);
+        }
+        return substr($canonicalQueryString, 1);
+    }
+
+    private function getCanonicalHeaders($oldheaders)
+    {
+        $headers = array();
+        foreach ($oldheaders as $key => $value) {
+            $headers[strtolower($key)] = trim($value);
+        }
+        ksort($headers);
+
+        $canonicalHeaders = '';
+        $signedHeaders = '';
+        foreach ($headers as $key => $value) {
+            $canonicalHeaders .= $key . ':' . $value . "\n";
+            $signedHeaders .= $key . ';';
+        }
+        $signedHeaders = substr($signedHeaders, 0, -1);
+        return [$canonicalHeaders, $signedHeaders];
+    }
+
+    private function curl($method, $url, $body, $header, $xml = false, $etag = false)
+    {
+        $ch = curl_init($url);
+        if ($this->proxy) {
+            curl_set_proxy($ch);
+        }
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, $header);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_TIMEOUT, 10);
+        curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
+        if (!empty($body)) {
+            curl_setopt($ch, CURLOPT_POSTFIELDS, $body);
+        }
+        if ($etag) {
+            curl_setopt($ch, CURLOPT_HEADER, true);
+        }
+        $response = curl_exec($ch);
+        $errno = curl_errno($ch);
+        if ($errno) {
+            curl_close($ch);
+            throw new Exception('Curl error: ' . curl_error($ch));
+        }
+        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        if ($etag) {
+            if (preg_match('/ETag: ([^\r\n]+)/', $response, $matches)) {
+                $this->etag = trim($matches[1]);
+            }
+            $headerSize = curl_getinfo($ch, CURLINFO_HEADER_SIZE);
+            $response = substr($response, $headerSize);
+        }
+        curl_close($ch);
+
+        if ($httpCode >= 200 && $httpCode < 300) {
+            if (empty($response)) return true;
+            return $xml ? $this->xml2array($response) : json_decode($response, true);
+        }
+        if ($xml) {
+            $arr = $this->xml2array($response);
+            if (isset($arr['Error']['Message'])) {
+                throw new Exception($arr['Error']['Message']);
+            } else {
+                throw new Exception('HTTP Code: ' . $httpCode);
+            }
+        } else {
+            $arr = json_decode($response, true);
+            if (isset($arr['message'])) {
+                throw new Exception($arr['message']);
+            } else {
+                throw new Exception('HTTP Code: ' . $httpCode);
+            }
+        }
+    }
+
+    private function xml2array($xml)
+    {
+        if (!$xml) {
+            return false;
+        }
+        LIBXML_VERSION < 20900 && libxml_disable_entity_loader(true);
+        return json_decode(json_encode(simplexml_load_string($xml, 'SimpleXMLElement', LIBXML_NOCDATA), JSON_UNESCAPED_UNICODE), true);
+    }
+
+    private function array2xml($array, $xml = null)
+    {
+        if ($xml === null) {
+            $xml = new \SimpleXMLElement('<root/>');
+        }
+
+        foreach ($array as $key => $value) {
+            if (is_array($value)) {
+                $subNode = $xml->addChild($key);
+                $this->array2xml($value, $subNode);
+            } else {
+                $xml->addChild($key, $value);
+            }
+        }
+
+        return $xml->asXML();
+    }
+}

app/lib/client/Aliyun.php

@@ -0,0 +1,100 @@
+<?php
+
+namespace app\lib\client;
+
+use Exception;
+
+/**
+ * 阿里云
+ */
+class Aliyun
+{
+    private $AccessKeyId;
+    private $AccessKeySecret;
+    private $Endpoint;
+    private $Version;
+    private $proxy = false;
+
+    public function __construct($AccessKeyId, $AccessKeySecret, $Endpoint, $Version, $proxy = false)
+    {
+        $this->AccessKeyId = $AccessKeyId;
+        $this->AccessKeySecret = $AccessKeySecret;
+        $this->Endpoint = $Endpoint;
+        $this->Version = $Version;
+        $this->proxy = $proxy;
+    }
+
+    /**
+     * @param array $param 请求参数
+     * @return bool|array
+     * @throws Exception
+     */
+    public function request($param, $method = 'POST')
+    {
+        $url = 'https://' . $this->Endpoint . '/';
+        $data = array(
+            'Format' => 'JSON',
+            'Version' => $this->Version,
+            'AccessKeyId' => $this->AccessKeyId,
+            'SignatureMethod' => 'HMAC-SHA1',
+            'Timestamp' => gmdate('Y-m-d\TH:i:s\Z'),
+            'SignatureVersion' => '1.0',
+            'SignatureNonce' => random(8)
+        );
+        $data = array_merge($data, $param);
+        $data['Signature'] = $this->aliyunSignature($data, $this->AccessKeySecret, $method);
+        if ($method == 'GET') {
+            $url .= '?' . http_build_query($data);
+        }
+        $ch = curl_init($url);
+        if ($this->proxy) {
+            curl_set_proxy($ch);
+        }
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_TIMEOUT, 10);
+        if ($method == 'POST') {
+            curl_setopt($ch, CURLOPT_POST, 1);
+            curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($data));
+        }
+        $response = curl_exec($ch);
+        $errno = curl_errno($ch);
+        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        if ($errno) {
+            curl_close($ch);
+            throw new Exception('Curl error: ' . curl_error($ch));
+        }
+        curl_close($ch);
+
+        $arr = json_decode($response, true);
+        if ($httpCode == 200) {
+            return $arr;
+        } elseif ($arr) {
+            throw new Exception($arr['Message']);
+        } else {
+            throw new Exception('返回数据解析失败');
+        }
+    }
+
+    private function aliyunSignature($parameters, $accessKeySecret, $method)
+    {
+        ksort($parameters);
+        $canonicalizedQueryString = '';
+        foreach ($parameters as $key => $value) {
+            if ($value === null) continue;
+            $canonicalizedQueryString .= '&' . $this->percentEncode($key) . '=' . $this->percentEncode($value);
+        }
+        $stringToSign = $method . '&%2F&' . $this->percentEncode(substr($canonicalizedQueryString, 1));
+        $signature = base64_encode(hash_hmac("sha1", $stringToSign, $accessKeySecret . "&", true));
+
+        return $signature;
+    }
+
+    private function percentEncode($str)
+    {
+        $search = ['+', '*', '%7E'];
+        $replace = ['%20', '%2A', '~'];
+        return str_replace($search, $replace, urlencode($str));
+    }
+}

app/lib/client/AliyunNew.php

@@ -0,0 +1,185 @@
+<?php
+
+namespace app\lib\client;
+
+use Exception;
+
+/**
+ * 阿里云V3
+ */
+class AliyunNew
+{
+    private $AccessKeyId;
+    private $AccessKeySecret;
+    private $Endpoint;
+    private $Version;
+    private $proxy = false;
+
+    public function __construct($AccessKeyId, $AccessKeySecret, $Endpoint, $Version, $proxy = false)
+    {
+        $this->AccessKeyId = $AccessKeyId;
+        $this->AccessKeySecret = $AccessKeySecret;
+        $this->Endpoint = $Endpoint;
+        $this->Version = $Version;
+        $this->proxy = $proxy;
+    }
+
+    /**
+     * @param string $method 请求方法
+     * @param string $action 操作名称
+     * @param array|null $params 请求参数
+     * @return array
+     * @throws Exception
+     */
+    public function request($method, $action, $path = '/', $params = null)
+    {
+        if (!empty($params)) {
+            $params = array_filter($params, function ($a) { return $a !== null;});
+        }
+
+        if($method == 'GET' || $method == 'DELETE'){
+            $query = $params;
+            $body = '';
+        }else{
+            $query = [];
+            $body = !empty($params) ? json_encode($params) : '';
+        }
+        $headers = [
+            'x-acs-action' => $action,
+            'x-acs-version' => $this->Version,
+            'x-acs-signature-nonce' => md5(uniqid(mt_rand(), true) . microtime()),
+            'x-acs-date' => gmdate('Y-m-d\TH:i:s\Z'),
+            'x-acs-content-sha256' => hash("sha256", $body),
+            'Host' => $this->Endpoint,
+        ];
+        if ($body) {
+            $headers['Content-Type'] = 'application/json; charset=utf-8';
+        }
+
+        $authorization = $this->generateSign($method, $path, $query, $headers, $body);
+        $headers['Authorization'] = $authorization;
+
+        $url = 'https://'.$this->Endpoint.$path;
+        if (!empty($query)) {
+            $url .= '?'.http_build_query($query);
+        }
+        $header = [];
+        foreach ($headers as $key => $value) {
+            $header[] = $key.': '.$value;
+        }
+        return $this->curl($method, $url, $body, $header);
+    }
+
+    private function generateSign($method, $path, $query, $headers, $body)
+    {
+        $algorithm = "ACS3-HMAC-SHA256";
+
+        // step 1: build canonical request string
+        $httpRequestMethod = $method;
+        $canonicalUri = $this->getCanonicalURI($path);
+        $canonicalQueryString = $this->getCanonicalQueryString($query);
+        [$canonicalHeaders, $signedHeaders] = $this->getCanonicalHeaders($headers);
+        $hashedRequestPayload = hash("sha256", $body);
+        $canonicalRequest = $httpRequestMethod."\n"
+            .$canonicalUri."\n"
+            .$canonicalQueryString."\n"
+            .$canonicalHeaders."\n"
+            .$signedHeaders."\n"
+            .$hashedRequestPayload;
+
+        // step 2: build string to sign
+        $hashedCanonicalRequest = hash("sha256", $canonicalRequest);
+        $stringToSign = $algorithm."\n"
+            .$hashedCanonicalRequest;
+
+        // step 3: sign string
+        $signature = hash_hmac("sha256", $stringToSign, $this->AccessKeySecret);
+
+        // step 4: build authorization
+        $authorization = $algorithm . ' Credential=' . $this->AccessKeyId . ',SignedHeaders=' . $signedHeaders . ',Signature=' . $signature;
+
+        return $authorization;
+    }
+
+    private function escape($str)
+    {
+        $search = ['+', '*', '%7E'];
+        $replace = ['%20', '%2A', '~'];
+        return str_replace($search, $replace, urlencode($str));
+    }
+
+    private function getCanonicalURI($path)
+    {
+        if (empty($path)) return '/';
+        $pattens = explode('/', $path);
+        $pattens = array_map(function ($item) {
+            return $this->escape($item);
+        }, $pattens);
+        $canonicalURI = implode('/', $pattens);
+        return $canonicalURI;
+    }
+
+    private function getCanonicalQueryString($parameters)
+    {
+        if (empty($parameters)) return '';
+        ksort($parameters);
+        $canonicalQueryString = '';
+        foreach ($parameters as $key => $value) {
+            $canonicalQueryString .= '&' . $this->escape($key). '=' . $this->escape($value);
+        }
+        return substr($canonicalQueryString, 1);
+    }
+
+    private function getCanonicalHeaders($oldheaders)
+    {
+        $headers = array();
+        foreach ($oldheaders as $key => $value) {
+            $headers[strtolower($key)] = trim($value);
+        }
+        ksort($headers);
+
+        $canonicalHeaders = '';
+        $signedHeaders = '';
+        foreach ($headers as $key => $value) {
+            $canonicalHeaders .= $key . ':' . $value . "\n";
+            $signedHeaders .= $key . ';';
+        }
+        $signedHeaders = substr($signedHeaders, 0, -1);
+        return [$canonicalHeaders, $signedHeaders];
+    }
+
+    private function curl($method, $url, $body, $header)
+    {
+        $ch = curl_init($url);
+        if ($this->proxy) {
+            curl_set_proxy($ch);
+        }
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, $header);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_TIMEOUT, 10);
+        curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
+        if (!empty($body)) {
+            curl_setopt($ch, CURLOPT_POSTFIELDS, $body);
+        }
+        $response = curl_exec($ch);
+        $errno = curl_errno($ch);
+        if ($errno) {
+            curl_close($ch);
+            throw new Exception('Curl error: ' . curl_error($ch));
+        }
+        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        curl_close($ch);
+
+        $arr = json_decode($response, true);
+        if ($httpCode == 200) {
+            return $arr;
+        } elseif ($arr) {
+            if(strpos($arr['Message'], '.') > 0) $arr['Message'] = substr($arr['Message'], 0, strpos($arr['Message'], '.')+1);
+            throw new Exception($arr['Message']);
+        } else {
+            throw new Exception('返回数据解析失败');
+        }
+    }
+}

app/lib/client/AliyunOss.php

@@ -0,0 +1,266 @@
+<?php
+
+namespace app\lib\client;
+
+use Exception;
+
+class AliyunOSS
+{
+    private $AccessKeyId;
+    private $AccessKeySecret;
+    private $Endpoint;
+    private $proxy = false;
+
+    public function __construct($AccessKeyId, $AccessKeySecret, $Endpoint, $proxy = false)
+    {
+        $this->AccessKeyId = $AccessKeyId;
+        $this->AccessKeySecret = $AccessKeySecret;
+        $this->Endpoint = $Endpoint;
+        $this->proxy = $proxy;
+    }
+
+    public function addBucketCnameCert($bucket, $domain, $cert_id)
+    {
+        $strXml = <<<EOF
+        <?xml version="1.0" encoding="utf-8"?>
+        <BucketCnameConfiguration>
+        </BucketCnameConfiguration>
+        EOF;
+        $xml = new \SimpleXMLElement($strXml);
+        $node = $xml->addChild('Cname');
+        $node->addChild('Domain', $domain);
+        $certNode = $node->addChild('CertificateConfiguration');
+        $certNode->addChild('CertId', $cert_id);
+        $certNode->addChild('Force', 'true');
+        $body = $xml->asXML();
+
+        $options = [
+            'bucket' => $bucket,
+            'key' => '',
+        ];
+        $query = [
+            'cname' => '',
+            'comp' => 'add'
+        ];
+        return $this->request('POST', '/', $query, $body, $options);
+    }
+
+    public function deleteBucketCnameCert($bucket, $domain)
+    {
+        $strXml = <<<EOF
+        <?xml version="1.0" encoding="utf-8"?>
+        <BucketCnameConfiguration>
+        </BucketCnameConfiguration>
+        EOF;
+        $xml = new \SimpleXMLElement($strXml);
+        $node = $xml->addChild('Cname');
+        $node->addChild('Domain', $domain);
+        $certNode = $node->addChild('CertificateConfiguration');
+        $certNode->addChild('DeleteCertificate', 'true');
+        $body = $xml->asXML();
+
+        $options = [
+            'bucket' => $bucket,
+            'key' => '',
+        ];
+        $query = [
+            'cname' => '',
+            'comp' => 'add'
+        ];
+        return $this->request('POST', '/', $query, $body, $options);
+    }
+
+    public function getBucketCname($bucket)
+    {
+        $options = [
+            'bucket' => $bucket,
+            'key' => '',
+        ];
+        $query = [
+            'cname' => '',
+        ];
+        return $this->request('GET', '/', $query, null, $options);
+    }
+
+    private function request($method, $path, $query, $body, $options)
+    {
+        $hostname = $options['bucket'] . '.' . $this->Endpoint;
+        $query_string = $this->toQueryString($query);
+        $query_string = empty($query_string) ? '' : '?' . $query_string;
+        $requestUrl = 'https://' . $hostname . $path . $query_string;
+        $headers = [
+            'Content-Type' => 'application/xml',
+            'Date' => gmdate('D, d M Y H:i:s \G\M\T'),
+        ];
+        $headers['Authorization'] = $this->getAuthorization($method, $path, $query, $headers, $options);
+        $header = [];
+        foreach ($headers as $key => $value) {
+            $header[] = $key . ': ' . $value;
+        }
+        return $this->curl($method, $requestUrl, $body, $header);
+    }
+
+    private function curl($method, $url, $body, $header)
+    {
+        $ch = curl_init($url);
+        if ($this->proxy) {
+            curl_set_proxy($ch);
+        }
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, $header);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_TIMEOUT, 10);
+        curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
+        if (!empty($body)) {
+            curl_setopt($ch, CURLOPT_POSTFIELDS, $body);
+        }
+        $response = curl_exec($ch);
+        $errno = curl_errno($ch);
+        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        if ($errno) {
+            curl_close($ch);
+            throw new Exception('Curl error: ' . curl_error($ch));
+        }
+        curl_close($ch);
+
+        if ($httpCode >= 200 && $httpCode < 300) {
+            if (empty($response)) return true;
+            return $this->xml2array($response);
+        }
+        $arr = $this->xml2array($response);
+        if (isset($arr['Message'])) {
+            throw new Exception($arr['Message']);
+        } else {
+            throw new Exception('HTTP Code: ' . $httpCode);
+        }
+    }
+
+    private function toQueryString($params = array())
+    {
+        $temp = array();
+        uksort($params, 'strnatcasecmp');
+        foreach ($params as $key => $value) {
+            if (is_string($key) && !is_array($value)) {
+                if (strlen($value) > 0) {
+                    $temp[] = rawurlencode($key) . '=' . rawurlencode($value);
+                } else {
+                    $temp[] = rawurlencode($key);
+                }
+            }
+        }
+        return implode('&', $temp);
+    }
+
+    private function xml2array($xml)
+    {
+        if (!$xml) {
+            return false;
+        }
+        LIBXML_VERSION < 20900 && libxml_disable_entity_loader(true);
+        return json_decode(json_encode(simplexml_load_string($xml, 'SimpleXMLElement', LIBXML_NOCDATA), JSON_UNESCAPED_UNICODE), true);
+    }
+
+    private function getAuthorization($method, $url, $query, $headers, $options)
+    {
+        $method = strtoupper($method);
+        $date = $headers['Date'];
+        $resourcePath = $this->getResourcePath($options);
+        $stringToSign = $this->calcStringToSign($method, $date, $headers, $resourcePath, $query);
+        $signature = base64_encode(hash_hmac('sha1', $stringToSign, $this->AccessKeySecret, true));
+        return 'OSS ' . $this->AccessKeyId . ':' . $signature;
+    }
+
+    private function getResourcePath(array $options)
+    {
+        $resourcePath = '/';
+        if (strlen($options['bucket']) > 0) {
+            $resourcePath .= $options['bucket'] . '/';
+        }
+        if (strlen($options['key']) > 0) {
+            $resourcePath .= $options['key'];
+        }
+        return $resourcePath;
+    }
+
+    private function calcStringToSign($method, $date, array $headers, $resourcePath, array $query)
+    {
+        /*
+		SignToString =
+			VERB + "\n"
+			+ Content-MD5 + "\n"
+			+ Content-Type + "\n"
+			+ Date + "\n"
+			+ CanonicalizedOSSHeaders
+			+ CanonicalizedResource
+		Signature = base64(hmac-sha1(AccessKeySecret, SignToString))
+	    */
+        $contentMd5 = '';
+        $contentType = '';
+        // CanonicalizedOSSHeaders
+        $signheaders = array();
+        foreach ($headers as $key => $value) {
+            $lowk = strtolower($key);
+            if (strncmp($lowk, "x-oss-", 6) == 0) {
+                $signheaders[$lowk] = $value;
+            } else if ($lowk === 'content-md5') {
+                $contentMd5 = $value;
+            } else if ($lowk === 'content-type') {
+                $contentType = $value;
+            }
+        }
+        ksort($signheaders);
+        $canonicalizedOSSHeaders = '';
+        foreach ($signheaders as $key => $value) {
+            $canonicalizedOSSHeaders .= $key . ':' . $value . "\n";
+        }
+        // CanonicalizedResource
+        $signquery = array();
+        foreach ($query as $key => $value) {
+            if (in_array($key, $this->signKeyList)) {
+                $signquery[$key] = $value;
+            }
+        }
+        ksort($signquery);
+        $sortedQueryList = array();
+        foreach ($signquery as $key => $value) {
+            if (strlen($value) > 0) {
+                $sortedQueryList[] = $key . '=' . $value;
+            } else {
+                $sortedQueryList[] = $key;
+            }
+        }
+        $queryStringSorted = implode('&', $sortedQueryList);
+        $canonicalizedResource = $resourcePath;
+        if (!empty($queryStringSorted)) {
+            $canonicalizedResource .= '?' . $queryStringSorted;
+        }
+        return $method . "\n" . $contentMd5 . "\n" . $contentType . "\n" . $date . "\n" . $canonicalizedOSSHeaders . $canonicalizedResource;
+    }
+
+    private $signKeyList = array(
+        "acl", "uploads", "location", "cors",
+        "logging", "website", "referer", "lifecycle",
+        "delete", "append", "tagging", "objectMeta",
+        "uploadId", "partNumber", "security-token", "x-oss-security-token",
+        "position", "img", "style", "styleName",
+        "replication", "replicationProgress",
+        "replicationLocation", "cname", "bucketInfo",
+        "comp", "qos", "live", "status", "vod",
+        "startTime", "endTime", "symlink",
+        "x-oss-process", "response-content-type", "x-oss-traffic-limit",
+        "response-content-language", "response-expires",
+        "response-cache-control", "response-content-disposition",
+        "response-content-encoding", "udf", "udfName", "udfImage",
+        "udfId", "udfImageDesc", "udfApplication",
+        "udfApplicationLog", "restore", "callback", "callback-var", "qosInfo",
+        "policy", "stat", "encryption", "versions", "versioning", "versionId", "requestPayment",
+        "x-oss-request-payer", "sequential",
+        "inventory", "inventoryId", "continuation-token", "asyncFetch",
+        "worm", "wormId", "wormExtend", "withHashContext",
+        "x-oss-enable-md5", "x-oss-enable-sha1", "x-oss-enable-sha256",
+        "x-oss-hash-ctx", "x-oss-md5-ctx", "transferAcceleration",
+        "regionList", "cloudboxes", "x-oss-ac-source-ip", "x-oss-ac-subnet-mask", "x-oss-ac-vpc-id", "x-oss-ac-forward-allow",
+        "metaQuery", "resourceGroup", "rtc", "x-oss-async-process", "responseHeader"
+    );
+}

app/lib/client/BaiduCloud.php

@@ -0,0 +1,180 @@
+<?php
+
+namespace app\lib\client;
+
+use Exception;
+
+/**
+ * 百度云
+ */
+class BaiduCloud
+{
+    private $AccessKeyId;
+    private $SecretAccessKey;
+    private $endpoint;
+    private $proxy = false;
+
+    public function __construct($AccessKeyId, $SecretAccessKey, $endpoint, $proxy = false)
+    {
+        $this->AccessKeyId = $AccessKeyId;
+        $this->SecretAccessKey = $SecretAccessKey;
+        $this->endpoint = $endpoint;
+        $this->proxy = $proxy;
+    }
+
+    /**
+     * @param string $method 请求方法
+     * @param string $path 请求路径
+     * @param array|null $query 请求参数
+     * @param array|null $params 请求体
+     * @return array
+     * @throws Exception
+     */
+    public function request($method, $path, $query = null, $params = null)
+    {
+        if (!empty($query)) {
+            $query = array_filter($query, function ($a) { return $a !== null;});
+        }
+        if (!empty($params)) {
+            $params = array_filter($params, function ($a) { return $a !== null;});
+        }
+
+        $time = time();
+        $date = gmdate("Y-m-d\TH:i:s\Z", $time);
+        $body = !empty($params) ? json_encode($params) : '';
+        $headers = [
+            'Host' => $this->endpoint,
+            'x-bce-date' => $date,
+        ];
+        if ($body) {
+            $headers['Content-Type'] = 'application/json';
+        }
+
+        $authorization = $this->generateSign($method, $path, $query, $headers, $time);
+        $headers['Authorization'] = $authorization;
+
+        $url = 'https://'.$this->endpoint.$path;
+        if (!empty($query)) {
+            $url .= '?'.http_build_query($query);
+        }
+        $header = [];
+        foreach ($headers as $key => $value) {
+            $header[] = $key.': '.$value;
+        }
+        return $this->curl($method, $url, $body, $header);
+    }
+
+    private function generateSign($method, $path, $query, $headers, $time)
+    {
+        $algorithm = "bce-auth-v1";
+
+        // step 1: build canonical request string
+        $httpRequestMethod = $method;
+        $canonicalUri = $this->getCanonicalUri($path);
+        $canonicalQueryString = $this->getCanonicalQueryString($query);
+        [$canonicalHeaders, $signedHeaders] = $this->getCanonicalHeaders($headers);
+        $canonicalRequest = $httpRequestMethod."\n"
+            .$canonicalUri."\n"
+            .$canonicalQueryString."\n"
+            .$canonicalHeaders;
+
+        // step 2: calculate signing key
+        $date = gmdate("Y-m-d\TH:i:s\Z", $time);
+        $expirationInSeconds = 1800;
+        $authString = $algorithm . '/' . $this->AccessKeyId . '/' . $date . '/' . $expirationInSeconds;
+        $signingKey = hash_hmac('sha256', $authString, $this->SecretAccessKey);
+
+        // step 3: sign string
+        $signature = hash_hmac("sha256", $canonicalRequest, $signingKey);
+
+        // step 4: build authorization
+        $authorization = $authString . '/' . $signedHeaders . "/" . $signature;
+
+        return $authorization;
+    }
+
+    private function escape($str)
+    {
+        $search = ['+', '*', '%7E'];
+        $replace = ['%20', '%2A', '~'];
+        return str_replace($search, $replace, urlencode($str));
+    }
+
+    private function getCanonicalUri($path)
+    {
+        if (empty($path)) return '/';
+        $uri = str_replace('%2F', '/', $this->escape($path));
+        if (substr($uri, 0, 1) !== '/') $uri = '/' . $uri;
+        return $uri;
+    }
+
+    private function getCanonicalQueryString($parameters)
+    {
+        if (empty($parameters)) return '';
+        ksort($parameters);
+        $canonicalQueryString = '';
+        foreach ($parameters as $key => $value) {
+            if ($key == 'authorization') continue;
+            $canonicalQueryString .= '&' . $this->escape($key) . '=' . $this->escape($value);
+        }
+        return substr($canonicalQueryString, 1);
+    }
+
+    private function getCanonicalHeaders($oldheaders)
+    {
+        $headers = array();
+        foreach ($oldheaders as $key => $value) {
+            $headers[strtolower($key)] = trim($value);
+        }
+        ksort($headers);
+
+        $canonicalHeaders = '';
+        $signedHeaders = '';
+        foreach ($headers as $key => $value) {
+            $canonicalHeaders .= $this->escape($key) . ':' . $this->escape($value) . "\n";
+            $signedHeaders .= $key . ';';
+        }
+        $canonicalHeaders = substr($canonicalHeaders, 0, -1);
+        $signedHeaders = substr($signedHeaders, 0, -1);
+        return [$canonicalHeaders, $signedHeaders];
+    }
+
+    private function curl($method, $url, $body, $header)
+    {
+        $ch = curl_init($url);
+        if ($this->proxy) {
+            curl_set_proxy($ch);
+        }
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, $header);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_TIMEOUT, 10);
+        curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
+        if (!empty($body)) {
+            curl_setopt($ch, CURLOPT_POSTFIELDS, $body);
+        }
+        $response = curl_exec($ch);
+        $errno = curl_errno($ch);
+        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        if ($errno) {
+            curl_close($ch);
+            throw new Exception('Curl error: ' . curl_error($ch));
+        }
+        curl_close($ch);
+
+        if (empty($response) && $httpCode == 200) {
+            return true;
+        }
+        $arr = json_decode($response, true);
+        if ($arr) {
+            if (isset($arr['code']) && isset($arr['message'])) {
+                throw new Exception($arr['message']);
+            } else {
+                return $arr;
+            }
+        } else {
+            throw new Exception('返回数据解析失败');
+        }
+    }
+}

app/lib/client/Ctyun.php

@@ -0,0 +1,163 @@
+<?php
+
+namespace app\lib\client;
+
+use Exception;
+
+/**
+ * 天翼云
+ */
+class Ctyun
+{
+    private $AccessKeyId;
+    private $SecretAccessKey;
+    private $endpoint;
+    private $proxy = false;
+
+    public function __construct($AccessKeyId, $SecretAccessKey, $endpoint, $proxy = false)
+    {
+        $this->AccessKeyId = $AccessKeyId;
+        $this->SecretAccessKey = $SecretAccessKey;
+        $this->endpoint = $endpoint;
+        $this->proxy = $proxy;
+    }
+
+    /**
+     * @param string $method 请求方法
+     * @param string $path 请求路径
+     * @param array|null $query 请求参数
+     * @param array|null $params 请求体
+     * @return array
+     * @throws Exception
+     */
+    public function request($method, $path, $query = null, $params = null)
+    {
+        if (!empty($query)) {
+            $query = array_filter($query, function ($a) { return $a !== null;});
+        }
+        if (!empty($params)) {
+            $params = array_filter($params, function ($a) { return $a !== null;});
+        }
+
+        $time = time();
+        $date = date("Ymd\THis\Z", $time);
+        $body = !empty($params) ? json_encode($params) : '';
+        $headers = [
+            'Host' => $this->endpoint,
+            'Eop-date' => $date,
+            'ctyun-eop-request-id' => getSid(),
+        ];
+        if ($body) {
+            $headers['Content-Type'] = 'application/json';
+        }
+
+        $authorization = $this->generateSign($query, $headers, $body, $date);
+        $headers['Eop-Authorization'] = $authorization;
+
+        $url = 'https://' . $this->endpoint . $path;
+        if (!empty($query)) {
+            $url .= '?' . http_build_query($query);
+        }
+        $header = [];
+        foreach ($headers as $key => $value) {
+            $header[] = $key . ': ' . $value;
+        }
+        return $this->curl($method, $url, $body, $header);
+    }
+
+    private function generateSign($query, $headers, $body, $date)
+    {
+        // step 1: build canonical request string
+        $canonicalQueryString = $this->getCanonicalQueryString($query);
+        [$canonicalHeaders, $signedHeaders] = $this->getCanonicalHeaders($headers);
+        $hashedRequestPayload = hash("sha256", $body);
+
+        // step 2: build string to sign
+        $stringToSign = $canonicalHeaders . "\n"
+            . $canonicalQueryString . "\n"
+            . $hashedRequestPayload;
+
+        // step 3: sign string
+        $ktime = hash_hmac("sha256", $date, $this->SecretAccessKey, true);
+        $kAk = hash_hmac("sha256", $this->AccessKeyId, $ktime, true);
+        $kdate = hash_hmac("sha256", substr($date, 0, 8), $kAk, true);
+        $signature = hash_hmac("sha256", $stringToSign, $kdate, true);
+        $signature = base64_encode($signature);
+
+        // step 4: build authorization
+        $authorization = $this->AccessKeyId . " Headers=" . $signedHeaders . " Signature=" . $signature;
+
+        return $authorization;
+    }
+
+    private function escape($str)
+    {
+        $search = ['+', '*', '%7E'];
+        $replace = ['%20', '%2A', '~'];
+        return str_replace($search, $replace, urlencode($str));
+    }
+
+    private function getCanonicalQueryString($parameters)
+    {
+        if (empty($parameters)) return '';
+        ksort($parameters);
+        $canonicalQueryString = '';
+        foreach ($parameters as $key => $value) {
+            $canonicalQueryString .= '&' . $this->escape($key) . '=' . $this->escape($value);
+        }
+        return substr($canonicalQueryString, 1);
+    }
+
+    private function getCanonicalHeaders($oldheaders)
+    {
+        $headers = array();
+        foreach ($oldheaders as $key => $value) {
+            $headers[strtolower($key)] = trim($value);
+        }
+        ksort($headers);
+
+        $canonicalHeaders = '';
+        $signedHeaders = '';
+        foreach ($headers as $key => $value) {
+            $canonicalHeaders .= $key . ':' . $value . "\n";
+            $signedHeaders .= $key . ';';
+        }
+        $signedHeaders = substr($signedHeaders, 0, -1);
+        return [$canonicalHeaders, $signedHeaders];
+    }
+
+    private function curl($method, $url, $body, $header)
+    {
+        $ch = curl_init($url);
+        if ($this->proxy) {
+            curl_set_proxy($ch);
+        }
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, $header);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_TIMEOUT, 10);
+        curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
+        if (!empty($body)) {
+            curl_setopt($ch, CURLOPT_POSTFIELDS, $body);
+        }
+        $response = curl_exec($ch);
+        $errno = curl_errno($ch);
+        if ($errno) {
+            curl_close($ch);
+            throw new Exception('Curl error: ' . curl_error($ch));
+        }
+        curl_close($ch);
+
+        $arr = json_decode($response, true);
+        if (isset($arr['statusCode']) && $arr['statusCode'] == 100000) {
+            return isset($arr['returnObj']) ? $arr['returnObj'] : true;
+        } elseif (isset($arr['errorMessage'])) {
+            throw new Exception($arr['errorMessage']);
+        } elseif (isset($arr['message'])) {
+            throw new Exception($arr['message']);
+        } else {
+            throw new Exception('返回数据解析失败');
+        }
+    }
+}

app/lib/client/HuaweiCloud.php

@@ -0,0 +1,191 @@
+<?php
+
+namespace app\lib\client;
+
+use Exception;
+
+/**
+ * 华为云
+ */
+class HuaweiCloud
+{
+    private $AccessKeyId;
+    private $SecretAccessKey;
+    private $endpoint;
+    private $proxy = false;
+
+    public function __construct($AccessKeyId, $SecretAccessKey, $endpoint, $proxy = false)
+    {
+        $this->AccessKeyId = $AccessKeyId;
+        $this->SecretAccessKey = $SecretAccessKey;
+        $this->endpoint = $endpoint;
+        $this->proxy = $proxy;
+    }
+
+    /**
+     * @param string $method 请求方法
+     * @param string $path 请求路径
+     * @param array|null $query 请求参数
+     * @param array|null $params 请求体
+     * @return array
+     * @throws Exception
+     */
+    public function request($method, $path, $query = null, $params = null)
+    {
+        if (!empty($query)) {
+            $query = array_filter($query, function ($a) { return $a !== null;});
+        }
+        if (!empty($params)) {
+            $params = array_filter($params, function ($a) { return $a !== null;});
+        }
+
+        $time = time();
+        $date = gmdate("Ymd\THis\Z", $time);
+        $body = !empty($params) ? json_encode($params) : '';
+        $headers = [
+            'Host' => $this->endpoint,
+            'X-Sdk-Date' => $date,
+        ];
+        if ($body) {
+            $headers['Content-Type'] = 'application/json';
+        }
+
+        $authorization = $this->generateSign($method, $path, $query, $headers, $body, $time);
+        $headers['Authorization'] = $authorization;
+
+        $url = 'https://' . $this->endpoint . $path;
+        if (!empty($query)) {
+            $url .= '?' . http_build_query($query);
+        }
+        $header = [];
+        foreach ($headers as $key => $value) {
+            $header[] = $key . ': ' . $value;
+        }
+        return $this->curl($method, $url, $body, $header);
+    }
+
+    private function generateSign($method, $path, $query, $headers, $body, $time)
+    {
+        $algorithm = "SDK-HMAC-SHA256";
+
+        // step 1: build canonical request string
+        $httpRequestMethod = $method;
+        $canonicalUri = $this->getCanonicalURI($path);
+        $canonicalQueryString = $this->getCanonicalQueryString($query);
+        [$canonicalHeaders, $signedHeaders] = $this->getCanonicalHeaders($headers);
+        $hashedRequestPayload = hash("sha256", $body);
+        $canonicalRequest = $httpRequestMethod . "\n"
+            . $canonicalUri . "\n"
+            . $canonicalQueryString . "\n"
+            . $canonicalHeaders . "\n"
+            . $signedHeaders . "\n"
+            . $hashedRequestPayload;
+
+        // step 2: build string to sign
+        $date = gmdate("Ymd\THis\Z", $time);
+        $hashedCanonicalRequest = hash("sha256", $canonicalRequest);
+        $stringToSign = $algorithm . "\n"
+            . $date . "\n"
+            . $hashedCanonicalRequest;
+
+        // step 3: sign string
+        $signature = hash_hmac("sha256", $stringToSign, $this->SecretAccessKey);
+
+        // step 4: build authorization
+        $authorization = $algorithm . ' Access=' . $this->AccessKeyId . ", SignedHeaders=" . $signedHeaders . ", Signature=" . $signature;
+
+        return $authorization;
+    }
+
+    private function escape($str)
+    {
+        $search = ['+', '*', '%7E'];
+        $replace = ['%20', '%2A', '~'];
+        return str_replace($search, $replace, urlencode($str));
+    }
+
+    private function getCanonicalURI($path)
+    {
+        if (empty($path)) return '/';
+        $pattens = explode('/', $path);
+        $pattens = array_map(function ($item) {
+            return $this->escape($item);
+        }, $pattens);
+        $canonicalURI = implode('/', $pattens);
+        if (substr($canonicalURI, -1) != '/') $canonicalURI .= '/';
+        return $canonicalURI;
+    }
+
+    private function getCanonicalQueryString($parameters)
+    {
+        if (empty($parameters)) return '';
+        ksort($parameters);
+        $canonicalQueryString = '';
+        foreach ($parameters as $key => $value) {
+            $canonicalQueryString .= '&' . $this->escape($key) . '=' . $this->escape($value);
+        }
+        return substr($canonicalQueryString, 1);
+    }
+
+    private function getCanonicalHeaders($oldheaders)
+    {
+        $headers = array();
+        foreach ($oldheaders as $key => $value) {
+            $headers[strtolower($key)] = trim($value);
+        }
+        ksort($headers);
+
+        $canonicalHeaders = '';
+        $signedHeaders = '';
+        foreach ($headers as $key => $value) {
+            $canonicalHeaders .= $key . ':' . $value . "\n";
+            $signedHeaders .= $key . ';';
+        }
+        $signedHeaders = substr($signedHeaders, 0, -1);
+        return [$canonicalHeaders, $signedHeaders];
+    }
+
+    private function curl($method, $url, $body, $header)
+    {
+        $ch = curl_init($url);
+        if ($this->proxy) {
+            curl_set_proxy($ch);
+        }
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, $header);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_TIMEOUT, 10);
+        curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
+        if (!empty($body)) {
+            curl_setopt($ch, CURLOPT_POSTFIELDS, $body);
+        }
+        $response = curl_exec($ch);
+        $errno = curl_errno($ch);
+        if ($errno) {
+            curl_close($ch);
+            throw new Exception('Curl error: ' . curl_error($ch));
+        }
+        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        curl_close($ch);
+
+        $arr = json_decode($response, true);
+        if ($arr) {
+            if (isset($arr['error_msg'])) {
+                throw new Exception($arr['error_msg']);
+            } elseif (isset($arr['message'])) {
+                throw new Exception($arr['message']);
+            } elseif (isset($arr['error']['error_msg'])) {
+                throw new Exception($arr['error']['error_msg']);
+            } else {
+                return $arr;
+            }
+        } else {
+            if ($httpCode >= 200 && $httpCode < 300) {
+                return null;
+            } else {
+                throw new Exception('返回数据解析失败');
+            }
+        }
+    }
+}

app/lib/client/Qiniu.php

@@ -0,0 +1,142 @@
+<?php
+
+namespace app\lib\client;
+
+use Exception;
+
+/**
+ * 七牛云
+ */
+class Qiniu
+{
+    private $ApiUrl = 'https://api.qiniu.com';
+    private $AccessKey;
+    private $SecretKey;
+    private $proxy = false;
+
+    public function __construct($AccessKey, $SecretKey, $proxy = false)
+    {
+        $this->AccessKey = $AccessKey;
+        $this->SecretKey = $SecretKey;
+        $this->proxy = $proxy;
+    }
+
+    /**
+     * @param string $method 请求方法
+     * @param string $path 请求路径
+     * @param array|null $query 请求参数
+     * @param array|null $params 请求体
+     * @return array
+     * @throws Exception
+     */
+    public function request($method, $path, $query = null, $params = null)
+    {
+        $url = $this->ApiUrl . $path;
+        $query_str = null;
+        $body = null;
+        if (!empty($query)) {
+            $query = array_filter($query, function ($a) {
+                return $a !== null;
+            });
+            $query_str = http_build_query($query);
+            $url .= '?' . $query_str;
+        }
+        if (!empty($params)) {
+            $params = array_filter($params, function ($a) {
+                return $a !== null;
+            });
+            $body = json_encode($params);
+        }
+
+        $sign_str = $path . ($query_str ? '?' . $query_str : '') . "\n";
+        $hmac = hash_hmac('sha1', $sign_str, $this->SecretKey, true);
+        $sign = $this->AccessKey . ':' . $this->base64_urlSafeEncode($hmac);
+
+        $header = [
+            'Authorization: QBox ' . $sign,
+        ];
+        if ($body) {
+            $header[] = 'Content-Type: application/json';
+        }
+        return $this->curl($method, $url, $body, $header);
+    }
+
+    public function pili_request($method, $path, $query = null, $params = null)
+    {
+        $this->ApiUrl = 'https://pili.qiniuapi.com';
+        $url = $this->ApiUrl . $path;
+        $query_str = null;
+        $body = null;
+        if (!empty($query)) {
+            $query = array_filter($query, function ($a) {
+                return $a !== null;
+            });
+            $query_str = http_build_query($query);
+            $url .= '?' . $query_str;
+        }
+        if (!empty($params)) {
+            $params = array_filter($params, function ($a) {
+                return $a !== null;
+            });
+            $body = json_encode($params);
+        }
+
+        $sign_str = $method . ' ' . $path . ($query_str ? '?' . $query_str : '') . "\nHost: pili.qiniuapi.com" . ($body ? "\nContent-Type: application/json" : '') . "\n\n" . $body;
+        $hmac = hash_hmac('sha1', $sign_str, $this->SecretKey, true);
+        $sign = $this->AccessKey . ':' . $this->base64_urlSafeEncode($hmac);
+
+        $header = [
+            'Authorization: Qiniu ' . $sign,
+        ];
+        if ($body) {
+            $header[] = 'Content-Type: application/json';
+        }
+        return $this->curl($method, $url, $body, $header);
+    }
+
+    private function base64_urlSafeEncode($data)
+    {
+        $find = array('+', '/');
+        $replace = array('-', '_');
+        return str_replace($find, $replace, base64_encode($data));
+    }
+
+    private function curl($method, $url, $body, $header)
+    {
+        $ch = curl_init($url);
+        if ($this->proxy) {
+            curl_set_proxy($ch);
+        }
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, $header);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_TIMEOUT, 10);
+        curl_setopt($ch, CURLOPT_USERAGENT, 'QiniuPHP/7.14.0 (' . php_uname("s") . '/' . php_uname("m") . ') PHP/' . phpversion());
+        curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
+        if (!empty($body)) {
+            curl_setopt($ch, CURLOPT_POSTFIELDS, $body);
+        }
+        $response = curl_exec($ch);
+        $errno = curl_errno($ch);
+        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        if ($errno) {
+            curl_close($ch);
+            throw new Exception('Curl error: ' . curl_error($ch));
+        }
+        curl_close($ch);
+
+        if ($httpCode == 200) {
+            $arr = json_decode($response, true);
+            if ($arr) return $arr;
+            return true;
+        } else {
+            $arr = json_decode($response, true);
+            if ($arr && !empty($arr['error'])) {
+                throw new Exception($arr['error']);
+            } else {
+                throw new Exception('返回数据解析失败');
+            }
+        }
+    }
+}

app/lib/client/TencentCloud.php

@@ -0,0 +1,132 @@
+<?php
+
+namespace app\lib\client;
+
+use Exception;
+
+/**
+ * 腾讯云
+ */
+class TencentCloud
+{
+    private $SecretId;
+    private $SecretKey;
+    private $endpoint;
+    private $service;
+    private $version;
+    private $region;
+    private $proxy = false;
+
+    public function __construct($SecretId, $SecretKey, $endpoint, $service, $version, $region = null, $proxy = false)
+    {
+        $this->SecretId = $SecretId;
+        $this->SecretKey = $SecretKey;
+        $this->endpoint = $endpoint;
+        $this->service = $service;
+        $this->version = $version;
+        $this->region = $region;
+        $this->proxy = $proxy;
+    }
+
+    /**
+     * @param string $action 方法名称
+     * @param array $param 请求参数
+     * @return array
+     * @throws Exception
+     */
+    public function request($action, $param)
+    {
+        $param = array_filter($param, function ($a) { return $a !== null;});
+        if (!$param) $param = (object)[];
+        $payload = json_encode($param);
+        $time = time();
+        $authorization = $this->generateSign($payload, $time);
+        $header = [
+            'Authorization: '.$authorization,
+            'Content-Type: application/json; charset=utf-8',
+            'X-TC-Action: '.$action,
+            'X-TC-Timestamp: '.$time,
+            'X-TC-Version: '.$this->version,
+        ];
+        if($this->region) {
+            $header[] = 'X-TC-Region: '.$this->region;
+        }
+        $res = $this->curl_post($payload, $header);
+        return $res;
+    }
+
+    private function generateSign($payload, $time)
+    {
+        $algorithm = "TC3-HMAC-SHA256";
+
+        // step 1: build canonical request string
+        $httpRequestMethod = "POST";
+        $canonicalUri = "/";
+        $canonicalQueryString = "";
+        $canonicalHeaders = "content-type:application/json; charset=utf-8\n"."host:".$this->endpoint."\n";
+        $signedHeaders = "content-type;host";
+        $hashedRequestPayload = hash("SHA256", $payload);
+        $canonicalRequest = $httpRequestMethod."\n"
+            .$canonicalUri."\n"
+            .$canonicalQueryString."\n"
+            .$canonicalHeaders."\n"
+            .$signedHeaders."\n"
+            .$hashedRequestPayload;
+
+        // step 2: build string to sign
+        $date = gmdate("Y-m-d", $time);
+        $credentialScope = $date."/".$this->service."/tc3_request";
+        $hashedCanonicalRequest = hash("SHA256", $canonicalRequest);
+        $stringToSign = $algorithm."\n"
+            .$time."\n"
+            .$credentialScope."\n"
+            .$hashedCanonicalRequest;
+
+        // step 3: sign string
+        $secretDate = hash_hmac("SHA256", $date, "TC3".$this->SecretKey, true);
+        $secretService = hash_hmac("SHA256", $this->service, $secretDate, true);
+        $secretSigning = hash_hmac("SHA256", "tc3_request", $secretService, true);
+        $signature = hash_hmac("SHA256", $stringToSign, $secretSigning);
+
+        // step 4: build authorization
+        $authorization = $algorithm
+            ." Credential=".$this->SecretId."/".$credentialScope
+            .", SignedHeaders=content-type;host, Signature=".$signature;
+
+        return $authorization;
+    }
+
+    private function curl_post($payload, $header)
+    {
+        $url = 'https://'.$this->endpoint.'/';
+        $ch = curl_init($url);
+        if ($this->proxy) {
+            curl_set_proxy($ch);
+        }
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, $header);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_TIMEOUT, 10);
+        curl_setopt($ch, CURLOPT_POST, 1);
+        curl_setopt($ch, CURLOPT_POSTFIELDS, $payload);
+        $response = curl_exec($ch);
+        $errno = curl_errno($ch);
+        if ($errno) {
+            curl_close($ch);
+            throw new Exception('Curl error: ' . curl_error($ch));
+        }
+        curl_close($ch);
+
+        $arr = json_decode($response, true);
+        if ($arr) {
+            if (isset($arr['Response']['Error'])) {
+                throw new Exception($arr['Response']['Error']['Message']);
+            } else {
+                return $arr['Response'];
+            }
+        } else {
+            throw new Exception('返回数据解析失败');
+        }
+    }
+}

app/lib/client/Ucloud.php

@@ -0,0 +1,51 @@
+<?php
+
+namespace app\lib\client;
+
+use Exception;
+
+class Ucloud
+{
+    const VERSION = "0.1.0";
+
+    private $ApiUrl = 'https://api.ucloud.cn/';
+    private $PublicKey;
+    private $PrivateKey;
+
+    public function __construct($PublicKey, $PrivateKey)
+    {
+        $this->PublicKey = $PublicKey;
+        $this->PrivateKey = $PrivateKey;
+    }
+
+    public function request($action, $params)
+    {
+        $param = [
+            'Action' => $action,
+            'PublicKey' => $this->PublicKey,
+        ];
+        $param = array_merge($param, $params);
+        $param['Signature'] = $this->ucloudSignature($param);
+        $ua = sprintf("PHP/%s PHP-SDK/%s", phpversion(), self::VERSION);
+        $response = get_curl($this->ApiUrl, json_encode($param), 0, 0, 0, $ua, 0, ['Content-Type: application/json']);
+        $result = json_decode($response, true);
+        if (isset($result['RetCode']) && $result['RetCode'] == 0) {
+            return $result;
+        } elseif (isset($result['Message'])) {
+            throw new Exception($result['Message']);
+        } else {
+            throw new Exception('返回数据解析失败');
+        }
+    }
+
+    private function ucloudSignature($param)
+    {
+        ksort($param);
+        $str = '';
+        foreach ($param as $key => $value) {
+            $str .= $key . $value;
+        }
+        $str .= $this->PrivateKey;
+        return sha1($str);
+    }
+}

app/lib/client/Volcengine.php

@@ -0,0 +1,247 @@
+<?php
+
+namespace app\lib\client;
+
+use Exception;
+
+/**
+ * 火山引擎
+ */
+class Volcengine
+{
+    private $AccessKeyId;
+    private $SecretAccessKey;
+    private $endpoint = "open.volcengineapi.com";
+    private $service;
+    private $version;
+    private $region;
+    private $proxy = false;
+
+    public function __construct($AccessKeyId, $SecretAccessKey, $endpoint, $service, $version, $region, $proxy = false)
+    {
+        $this->AccessKeyId = $AccessKeyId;
+        $this->SecretAccessKey = $SecretAccessKey;
+        $this->endpoint = $endpoint;
+        $this->service = $service;
+        $this->version = $version;
+        $this->region = $region;
+        $this->proxy = $proxy;
+    }
+
+    /**
+     * @param string $method 请求方法
+     * @param string $action 方法名称
+     * @param array $params 请求参数
+     * @return array
+     * @throws Exception
+     */
+    public function request($method, $action, $params = [], $querys = [])
+    {
+        if (!empty($params)) {
+            $params = array_filter($params, function ($a) {
+                return $a !== null;
+            });
+        }
+
+        $query = [
+            'Action' => $action,
+            'Version' => $this->version,
+        ];
+
+        $body = '';
+        if ($method == 'GET') {
+            $query = array_merge($query, $params);
+        } else {
+            $body = !empty($params) ? json_encode($params) : '';
+            if (!empty($querys)) {
+                $query = array_merge($query, $querys);
+            }
+        }
+
+        $time = time();
+        $headers = [
+            'Host' => $this->endpoint,
+            'X-Date' => gmdate("Ymd\THis\Z", $time),
+            //'X-Content-Sha256' => hash("sha256", $body),
+        ];
+        if ($body) {
+            $headers['Content-Type'] = 'application/json';
+        }
+        $path = '/';
+
+        $authorization = $this->generateSign($method, $path, $query, $headers, $body, $time);
+        $headers['Authorization'] = $authorization;
+
+        $url = 'https://' . $this->endpoint . $path . '?' . http_build_query($query);
+        $header = [];
+        foreach ($headers as $key => $value) {
+            $header[] = $key . ': ' . $value;
+        }
+        return $this->curl($method, $url, $body, $header);
+    }
+
+    /**
+     * @param string $method 请求方法
+     * @param string $action 方法名称
+     * @param array $params 请求参数
+     * @return array
+     * @throws Exception
+     */
+    public function tos_request($method, $params = [], $query = [])
+    {
+        if (!empty($params)) {
+            $params = array_filter($params, function ($a) {
+                return $a !== null;
+            });
+        }
+
+        $body = '';
+        if ($method != 'GET') {
+            $body = !empty($params) ? json_encode($params) : '';
+        }
+
+        $time = time();
+        $headers = [
+            'Host' => $this->endpoint,
+            'X-Tos-Date' => gmdate("Ymd\THis\Z", $time),
+            'X-Tos-Content-Sha256' => hash("sha256", $body),
+        ];
+        if ($body) {
+            $headers['Content-Type'] = 'application/json';
+        }
+        $path = '/';
+
+        $authorization = $this->generateSign($method, $path, $query, $headers, $body, $time);
+        $headers['Authorization'] = $authorization;
+
+        $url = 'https://' . $this->endpoint . $path . '?' . http_build_query($query);
+        $header = [];
+        foreach ($headers as $key => $value) {
+            $header[] = $key . ': ' . $value;
+        }
+        return $this->curl($method, $url, $body, $header);
+    }
+
+    private function generateSign($method, $path, $query, $headers, $body, $time)
+    {
+        $algorithm = $this->service == 'tos' ? "TOS4-HMAC-SHA256" : "HMAC-SHA256";
+
+        // step 1: build canonical request string
+        $httpRequestMethod = $method;
+        $canonicalUri = $path;
+        if (substr($canonicalUri, -1) != "/") $canonicalUri .= "/";
+        $canonicalQueryString = $this->getCanonicalQueryString($query);
+        [$canonicalHeaders, $signedHeaders] = $this->getCanonicalHeaders($headers);
+        $hashedRequestPayload = hash("sha256", $body);
+        $canonicalRequest = $httpRequestMethod . "\n"
+            . $canonicalUri . "\n"
+            . $canonicalQueryString . "\n"
+            . $canonicalHeaders . "\n"
+            . $signedHeaders . "\n"
+            . $hashedRequestPayload;
+
+        // step 2: build string to sign
+        $date = gmdate("Ymd\THis\Z", $time);
+        $shortDate = substr($date, 0, 8);
+        $credentialScope = $shortDate . '/' . $this->region . '/' . $this->service . '/request';
+        $hashedCanonicalRequest = hash("sha256", $canonicalRequest);
+        $stringToSign = $algorithm . "\n"
+            . $date . "\n"
+            . $credentialScope . "\n"
+            . $hashedCanonicalRequest;
+
+        // step 3: sign string
+        $kDate = hash_hmac("sha256", $shortDate, $this->SecretAccessKey, true);
+        $kRegion = hash_hmac("sha256", $this->region, $kDate, true);
+        $kService = hash_hmac("sha256", $this->service, $kRegion, true);
+        $kSigning = hash_hmac("sha256", "request", $kService, true);
+        $signature = hash_hmac("sha256", $stringToSign, $kSigning);
+
+        // step 4: build authorization
+        $credential = $this->AccessKeyId . '/' . $credentialScope;
+        $authorization = $algorithm . ' Credential=' . $credential . ", SignedHeaders=" . $signedHeaders . ", Signature=" . $signature;
+
+        return $authorization;
+    }
+
+    private function escape($str)
+    {
+        $search = ['+', '*', '%7E'];
+        $replace = ['%20', '%2A', '~'];
+        return str_replace($search, $replace, urlencode($str));
+    }
+
+    private function getCanonicalQueryString($parameters)
+    {
+        if (empty($parameters)) return '';
+        ksort($parameters);
+        $canonicalQueryString = '';
+        foreach ($parameters as $key => $value) {
+            $canonicalQueryString .= '&' . $this->escape($key) . '=' . $this->escape($value);
+        }
+        return substr($canonicalQueryString, 1);
+    }
+
+    private function getCanonicalHeaders($oldheaders)
+    {
+        $headers = array();
+        foreach ($oldheaders as $key => $value) {
+            $headers[strtolower($key)] = trim($value);
+        }
+        ksort($headers);
+
+        $canonicalHeaders = '';
+        $signedHeaders = '';
+        foreach ($headers as $key => $value) {
+            $canonicalHeaders .= $key . ':' . $value . "\n";
+            $signedHeaders .= $key . ';';
+        }
+        $signedHeaders = substr($signedHeaders, 0, -1);
+        return [$canonicalHeaders, $signedHeaders];
+    }
+
+    private function curl($method, $url, $body, $header)
+    {
+        $ch = curl_init($url);
+        if ($this->proxy) {
+            curl_set_proxy($ch);
+        }
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, $header);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_TIMEOUT, 10);
+        curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
+        if (!empty($body)) {
+            curl_setopt($ch, CURLOPT_POSTFIELDS, $body);
+        }
+        $response = curl_exec($ch);
+        $errno = curl_errno($ch);
+        if ($errno) {
+            curl_close($ch);
+            throw new Exception('Curl error: ' . curl_error($ch));
+        }
+        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        curl_close($ch);
+
+        $arr = json_decode($response, true);
+        if ($httpCode == 200) {
+            if (isset($arr['Result'])) {
+                return $arr['Result'];
+            }
+            return true;
+        } else {
+            if (isset($arr['ResponseMetadata']['Error']['MessageCN'])) {
+                throw new Exception($arr['ResponseMetadata']['Error']['MessageCN']);
+            } elseif (isset($arr['ResponseMetadata']['Error']['Message'])) {
+                throw new Exception($arr['ResponseMetadata']['Error']['Message']);
+            } elseif (isset($arr['Message'])) {
+                throw new Exception($arr['Message']);
+            } elseif (isset($arr['message'])) {
+                throw new Exception($arr['message']);
+            } else {
+                throw new Exception('返回数据解析失败(http_code=' . $httpCode . ')');
+            }
+        }
+    }
+}

app/lib/deploy/aliyun.php

@@ -0,0 +1,651 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use app\lib\client\Aliyun as AliyunClient;
+use app\lib\client\AliyunNew as AliyunNewClient;
+use app\lib\client\AliyunOSS;
+use Exception;
+
+class aliyun implements DeployInterface
+{
+    private $logger;
+    private $AccessKeyId;
+    private $AccessKeySecret;
+    private $proxy;
+
+    public function __construct($config)
+    {
+        $this->AccessKeyId = $config['AccessKeyId'];
+        $this->AccessKeySecret = $config['AccessKeySecret'];
+        $this->proxy = isset($config['proxy']) ? $config['proxy'] == 1 : false;
+    }
+
+    public function check()
+    {
+        if (empty($this->AccessKeyId) || empty($this->AccessKeySecret)) throw new Exception('必填参数不能为空');
+        $client = new AliyunClient($this->AccessKeyId, $this->AccessKeySecret, 'cas.aliyuncs.com', '2020-04-07', $this->proxy);
+        $param = ['Action' => 'ListUserCertificateOrder'];
+        $client->request($param);
+        return true;
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        if ($config['product'] == 'api') {
+            $this->deploy_api($fullchain, $privatekey, $config);
+        } elseif ($config['product'] == 'vod') {
+            $this->deploy_vod($fullchain, $privatekey, $config);
+        } elseif ($config['product'] == 'fc') {
+            $this->deploy_fc($fullchain, $privatekey, $config);
+        } elseif ($config['product'] == 'fc2') {
+            $this->deploy_fc2($fullchain, $privatekey, $config);
+        } else {
+            [$cert_id, $cert_name] = $this->get_cert_id($fullchain, $privatekey);
+            if (!$cert_id) throw new Exception('证书ID获取失败');
+            if ($config['product'] == 'cdn') {
+                $this->deploy_cdn($cert_id, $cert_name, $config);
+            } elseif ($config['product'] == 'dcdn') {
+                $this->deploy_dcdn($cert_id, $cert_name, $config);
+            } elseif ($config['product'] == 'esa') {
+                $this->deploy_esa($cert_id, $config);
+            } elseif ($config['product'] == 'oss') {
+                $this->deploy_oss($cert_id, $config);
+            } elseif ($config['product'] == 'waf') {
+                $this->deploy_waf($cert_id, $config);
+            } elseif ($config['product'] == 'waf2') {
+                $this->deploy_waf2($cert_id, $config);
+            } elseif ($config['product'] == 'ddoscoo') {
+                $this->deploy_ddoscoo($cert_id, $config);
+            } elseif ($config['product'] == 'live') {
+                $this->deploy_live($cert_id, $cert_name, $config);
+            } elseif ($config['product'] == 'clb') {
+                $this->deploy_clb($cert_id, $cert_name, $config);
+            } elseif ($config['product'] == 'alb') {
+                $this->deploy_alb($cert_id, $config);
+            } elseif ($config['product'] == 'nlb') {
+                $this->deploy_nlb($cert_id, $config);
+            } else {
+                throw new Exception('未知的产品类型');
+            }
+            $info['cert_id'] = $cert_id;
+            $info['cert_name'] = $cert_name;
+        }
+    }
+
+    private function get_cert_id($fullchain, $privatekey)
+    {
+        $certInfo = openssl_x509_parse($fullchain, true);
+        if (!$certInfo) throw new Exception('证书解析失败');
+        $cert_name = str_replace('*.', '', $certInfo['subject']['CN']) . '-' . $certInfo['validFrom_time_t'];
+        $serial_no = strtolower($certInfo['serialNumberHex']);
+
+        $client = new AliyunClient($this->AccessKeyId, $this->AccessKeySecret, 'cas.aliyuncs.com', '2020-04-07', $this->proxy);
+        $param = [
+            'Action' => 'ListUserCertificateOrder',
+            'Keyword' => $certInfo['subject']['CN'],
+            'OrderType' => 'UPLOAD',
+        ];
+        try {
+            $data = $client->request($param);
+        } catch (Exception $e) {
+            throw new Exception('查询证书列表失败：' . $e->getMessage());
+        }
+        $cert_id = null;
+        if ($data['TotalCount'] > 0 && !empty($data['CertificateOrderList'])) {
+            foreach ($data['CertificateOrderList'] as $cert) {
+                if (strtolower($cert['SerialNo']) == $serial_no) {
+                    $cert_id = $cert['CertificateId'];
+                    $cert_name = $cert['Name'];
+                    break;
+                }
+            }
+        }
+        if ($cert_id) {
+            $this->log('找到已上传的证书 CertId=' . $cert_id);
+            return [$cert_id, $cert_name];
+        }
+
+        $param = [
+            'Action' => 'UploadUserCertificate',
+            'Name' => $cert_name,
+            'Cert' => $fullchain,
+            'Key' => $privatekey,
+        ];
+        try {
+            $data = $client->request($param);
+        } catch (Exception $e) {
+            throw new Exception('上传证书失败：' . $e->getMessage());
+        }
+        $this->log('证书上传成功！CertId=' . $data['CertId']);
+        usleep(500000);
+        return [$data['CertId'], $cert_name];
+    }
+
+    private function deploy_cdn($cert_id, $cert_name, $config)
+    {
+        $domain = $config['domain'];
+        if (empty($domain)) throw new Exception('CDN绑定域名不能为空');
+        $client = new AliyunClient($this->AccessKeyId, $this->AccessKeySecret, 'cdn.aliyuncs.com', '2018-05-10', $this->proxy);
+        $param = [
+            'Action' => 'SetCdnDomainSSLCertificate',
+            'DomainName' => $domain,
+            'CertName' => $cert_name,
+            'CertType' => 'cas',
+            'SSLProtocol' => 'on',
+            'CertId' => $cert_id,
+        ];
+        $client->request($param);
+        $this->log('CDN域名 ' . $domain . ' 部署证书成功！');
+    }
+
+    private function deploy_dcdn($cert_id, $cert_name, $config)
+    {
+        $domain = $config['domain'];
+        if (empty($domain)) throw new Exception('DCDN绑定域名不能为空');
+        $client = new AliyunClient($this->AccessKeyId, $this->AccessKeySecret, 'dcdn.aliyuncs.com', '2018-01-15', $this->proxy);
+        $param = [
+            'Action' => 'SetDcdnDomainSSLCertificate',
+            'DomainName' => $domain,
+            'CertName' => $cert_name,
+            'CertType' => 'cas',
+            'SSLProtocol' => 'on',
+            'CertId' => $cert_id,
+        ];
+        $client->request($param);
+        $this->log('DCDN域名 ' . $domain . ' 部署证书成功！');
+    }
+
+    private function deploy_esa($cas_id, $config)
+    {
+        $sitename = $config['esa_sitename'];
+        if (empty($sitename)) throw new Exception('ESA站点名称不能为空');
+
+        $client = new AliyunClient($this->AccessKeyId, $this->AccessKeySecret, 'esa.cn-hangzhou.aliyuncs.com', '2024-09-10');
+        $param = [
+            'Action' => 'ListSites',
+            'SiteName' => $sitename,
+            'SiteSearchType' => 'exact',
+        ];
+        try {
+            $data = $client->request($param, 'GET');
+        } catch (Exception $e) {
+            throw new Exception('查询ESA站点列表失败：' . $e->getMessage());
+        }
+        if ($data['TotalCount'] == 0) throw new Exception('ESA站点 ' . $sitename . ' 不存在');
+        $this->log('成功查询到' . $data['TotalCount'] . '个ESA站点');
+        $site_id = $data['Sites'][0]['SiteId'];
+
+        $param = [
+            'Action' => 'ListCertificates',
+            'SiteId' => $site_id,
+        ];
+        try {
+            $data = $client->request($param, 'GET');
+        } catch (Exception $e) {
+            throw new Exception('查询ESA站点' . $sitename . '证书列表失败：' . $e->getMessage());
+        }
+        $this->log('ESA站点 ' . $sitename . ' 查询到' . $data['TotalCount'] . '个SSL证书');
+
+        $cert_id = null;
+        $cert_name = null;
+        foreach ($data['Result'] as $cert) {
+            $domains = explode(',', $cert['SAN']);
+            $flag = true;
+            foreach ($domains as $domain) {
+                if (!in_array($domain, $config['domainList'])) {
+                    $flag = false;
+                    break;
+                }
+            }
+            if ($flag) {
+                $cert_id = $cert['Id'];
+                $cert_name = $cert['CommonName'];
+                break;
+            }
+        }
+
+        $param = [
+            'Action' => 'SetCertificate',
+            'SiteId' => $site_id,
+            'Type' => 'cas',
+            'CasId' => $cas_id,
+        ];
+        if ($cert_id) {
+            $param['Update'] = 'true';
+            $param['Id'] = $cert_id;
+        }
+        $client->request($param);
+        if ($cert_id) {
+            $this->log('ESA站点 ' . $sitename . ' 域名 ' . $cert_name . ' 更新证书成功！');
+        } else {
+            $this->log('ESA站点 ' . $sitename . ' 添加证书成功！');
+        }
+    }
+
+    private function deploy_oss($cert_id, $config)
+    {
+        if (empty($config['domain'])) throw new Exception('OSS绑定域名不能为空');
+        if (empty($config['oss_endpoint'])) throw new Exception('OSS Endpoint不能为空');
+        if (empty($config['oss_bucket'])) throw new Exception('OSS Bucket不能为空');
+        $client = new AliyunOSS($this->AccessKeyId, $this->AccessKeySecret, $config['oss_endpoint']);
+        $client->addBucketCnameCert($config['oss_bucket'], $config['domain'], $cert_id);
+        $this->log('OSS域名 ' . $config['domain'] . ' 部署证书成功！');
+    }
+
+    private function deploy_waf($cert_id, $config)
+    {
+        $domain = $config['domain'];
+        if (empty($domain)) throw new Exception('WAF绑定域名不能为空');
+
+        $endpoint = 'wafopenapi.' . $config['region'] . '.aliyuncs.com';
+
+        $client = new AliyunClient($this->AccessKeyId, $this->AccessKeySecret, $endpoint, '2021-10-01', $this->proxy);
+
+        $param = [
+            'Action' => 'DescribeInstance',
+            'RegionId' => $config['region'],
+        ];
+        try {
+            $data = $client->request($param, 'GET');
+        } catch (Exception $e) {
+            throw new Exception('获取WAF实例详情失败：' . $e->getMessage());
+        }
+        if (empty($data['InstanceId'])) throw new Exception('当前账号未找到WAF实例');
+        $instance_id = $data['InstanceId'];
+        $this->log('获取WAF实例ID成功 InstanceId=' . $instance_id);
+
+        $param = [
+            'Action' => 'DescribeDomainDetail',
+            'InstanceId' => $instance_id,
+            'Domain' => $domain,
+            'RegionId' => $config['region'],
+        ];
+        try {
+            $data = $client->request($param, 'GET');
+        } catch (Exception $e) {
+            throw new Exception('查询CNAME接入详情失败：' . $e->getMessage());
+        }
+
+        if (isset($data['Listen']['CertId'])) {
+            $old_cert_id = $data['Listen']['CertId'];
+            if (strpos($old_cert_id, '-')) $old_cert_id = substr($old_cert_id, 0, strpos($old_cert_id, '-'));
+            if (!empty($old_cert_id) && $old_cert_id == $cert_id) {
+                $this->log('WAF域名 ' . $domain . ' 证书已配置，无需重复操作');
+                return;
+            }
+        }
+
+        $data['Listen']['CertId'] = $cert_id . '-cn-hangzhou';
+        if (empty($data['Listen']['HttpsPorts'])) $data['Listen']['HttpsPorts'] = [443];
+        $data['Redirect']['Backends'] = $data['Redirect']['AllBackends'];
+        $param = [
+            'Action' => 'ModifyDomain',
+            'InstanceId' => $instance_id,
+            'Domain' => $domain,
+            'Listen' => json_encode($data['Listen']),
+            'Redirect' => json_encode($data['Redirect']),
+            'RegionId' => $config['region'],
+        ];
+        $data = $client->request($param);
+
+        $this->log('WAF域名 ' . $domain . ' 部署证书成功！');
+    }
+
+    private function deploy_waf2($cert_id, $config)
+    {
+        $domain = $config['domain'];
+        if (empty($domain)) throw new Exception('WAF绑定域名不能为空');
+
+        $endpoint = 'wafopenapi.' . $config['region'] . '.aliyuncs.com';
+
+        $client = new AliyunClient($this->AccessKeyId, $this->AccessKeySecret, $endpoint, '2019-09-10', $this->proxy);
+
+        $param = [
+            'Action' => 'DescribeInstanceInfo',
+            'RegionId' => $config['region'],
+        ];
+        try {
+            $data = $client->request($param, 'GET');
+        } catch (Exception $e) {
+            throw new Exception('获取WAF实例详情失败：' . $e->getMessage());
+        }
+        if (empty($data['InstanceInfo']['InstanceId'])) throw new Exception('当前账号未找到WAF实例');
+        $instance_id = $data['InstanceInfo']['InstanceId'];
+        $this->log('获取WAF实例ID成功 InstanceId=' . $instance_id);
+
+        $param = [
+            'Action' => 'CreateCertificateByCertificateId',
+            'InstanceId' => $instance_id,
+            'Domain' => $domain,
+            'CertificateId' => $cert_id,
+        ];
+        $client->request($param);
+
+        $this->log('WAF域名 ' . $domain . ' 部署证书成功！');
+    }
+
+    private function deploy_api($fullchain, $privatekey, $config)
+    {
+        $domain = $config['domain'];
+        $groupid = $config['api_groupid'];
+        if (empty($groupid)) throw new Exception('API分组ID不能为空');
+        if (empty($domain)) throw new Exception('API分组绑定域名不能为空');
+
+        $certInfo = openssl_x509_parse($fullchain, true);
+        if (!$certInfo) throw new Exception('证书解析失败');
+        $cert_name = str_replace('*.', '', $certInfo['subject']['CN']) . '-' . $certInfo['validFrom_time_t'];
+
+        $endpoint = 'apigateway.' . $config['regionid'] . '.aliyuncs.com';
+
+        $client = new AliyunClient($this->AccessKeyId, $this->AccessKeySecret, $endpoint, '2016-07-14', $this->proxy);
+
+        $param = [
+            'Action' => 'SetDomainCertificate',
+            'GroupId' => $groupid,
+            'DomainName' => $domain,
+            'CertificateName' => $cert_name,
+            'CertificateBody' => $fullchain,
+            'CertificatePrivateKey' => $privatekey,
+        ];
+        $client->request($param);
+
+        $this->log('API网关域名 ' . $domain . ' 部署证书成功！');
+    }
+
+    private function deploy_ddoscoo($cert_id, $config)
+    {
+        $domain = $config['domain'];
+        if (empty($domain)) throw new Exception('绑定域名不能为空');
+
+        $endpoint = 'ddoscoo.' . $config['region'] . '.aliyuncs.com';
+
+        $client = new AliyunClient($this->AccessKeyId, $this->AccessKeySecret, $endpoint, '2020-01-01', $this->proxy);
+
+        $param = [
+            'Action' => 'AssociateWebCert',
+            'Domain' => $domain,
+            'CertId' => $cert_id,
+        ];
+        $client->request($param);
+
+        $this->log('DDoS高防域名 ' . $domain . ' 部署证书成功！');
+    }
+
+    private function deploy_live($cert_id, $cert_name, $config)
+    {
+        $domain = $config['domain'];
+        if (empty($domain)) throw new Exception('视频直播绑定域名不能为空');
+        $client = new AliyunClient($this->AccessKeyId, $this->AccessKeySecret, 'live.aliyuncs.com', '2016-11-01', $this->proxy);
+        $param = [
+            'Action' => 'SetLiveDomainCertificate',
+            'DomainName' => $domain,
+            'CertName' => $cert_name,
+            'CertType' => 'cas',
+            'SSLProtocol' => 'on',
+            'CertId' => $cert_id,
+        ];
+        $client->request($param);
+        $this->log('设置视频直播域名 ' . $domain . ' 证书成功！');
+    }
+
+    private function deploy_vod($fullchain, $privatekey, $config)
+    {
+        $domain = $config['domain'];
+        if (empty($domain)) throw new Exception('视频点播绑定域名不能为空');
+        $client = new AliyunClient($this->AccessKeyId, $this->AccessKeySecret, 'vod.cn-shanghai.aliyuncs.com', '2017-03-21', $this->proxy);
+        $param = [
+            'Action' => 'SetVodDomainCertificate',
+            'DomainName' => $domain,
+            'SSLProtocol' => 'on',
+            'SSLPub' => $fullchain,
+            'SSLPri' => $privatekey,
+        ];
+        $client->request($param);
+        $this->log('视频点播域名 ' . $domain . ' 部署证书成功！');
+    }
+
+    private function deploy_fc($fullchain, $privatekey, $config)
+    {
+        $domain = $config['domain'];
+        $fc_cname = $config['fc_cname'];
+        if (empty($domain)) throw new Exception('函数计算域名不能为空');
+        if (empty($fc_cname)) throw new Exception('域名CNAME地址不能为空');
+
+        $certInfo = openssl_x509_parse($fullchain, true);
+        if (!$certInfo) throw new Exception('证书解析失败');
+        $cert_name = str_replace('*.', '', $certInfo['subject']['CN']) . '-' . $certInfo['validFrom_time_t'];
+
+        $client = new AliyunNewClient($this->AccessKeyId, $this->AccessKeySecret, $fc_cname, '2023-03-30', $this->proxy);
+
+        try {
+            $data = $client->request('GET', 'GetCustomDomain', '/2023-03-30/custom-domains/' . $domain);
+        } catch (Exception $e) {
+            throw new Exception('获取绑定域名信息失败：' . $e->getMessage());
+        }
+        $this->log('获取函数计算绑定域名信息成功');
+
+        if (isset($data['certConfig']['certificate']) && $data['certConfig']['certificate'] == $fullchain) {
+            $this->log('函数计算域名 ' . $domain . ' 证书已配置，无需重复操作');
+            return;
+        }
+
+        if ($data['protocol'] == 'HTTP') $data['protocol'] = 'HTTP,HTTPS';
+        $data['certConfig']['certName'] = $cert_name;
+        $data['certConfig']['certificate'] = $fullchain;
+        $data['certConfig']['privateKey'] = $privatekey;
+
+        $param = [
+            'authConfig' => $data['authConfig'],
+            'certConfig' => $data['certConfig'],
+            'protocol' => $data['protocol'],
+            'routeConfig' => $data['routeConfig'],
+            'tlsConfig' => $data['tlsConfig'],
+            'wafConfig' => $data['wafConfig'],
+        ];
+        $client->request('PUT', 'UpdateCustomDomain', '/2023-03-30/custom-domains/' . $domain, $param);
+
+        $this->log('函数计算域名 ' . $domain . ' 部署证书成功！');
+    }
+
+    private function deploy_fc2($fullchain, $privatekey, $config)
+    {
+        $domain = $config['domain'];
+        $fc_cname = $config['fc_cname'];
+        if (empty($domain)) throw new Exception('函数计算域名不能为空');
+        if (empty($fc_cname)) throw new Exception('域名CNAME地址不能为空');
+
+        $certInfo = openssl_x509_parse($fullchain, true);
+        if (!$certInfo) throw new Exception('证书解析失败');
+        $cert_name = str_replace('*.', '', $certInfo['subject']['CN']) . '-' . $certInfo['validFrom_time_t'];
+
+        $client = new AliyunNewClient($this->AccessKeyId, $this->AccessKeySecret, $fc_cname, '2021-04-06', $this->proxy);
+
+        try {
+            $data = $client->request('GET', 'GetCustomDomain', '/2021-04-06/custom-domains/' . $domain);
+        } catch (Exception $e) {
+            throw new Exception('获取绑定域名信息失败：' . $e->getMessage());
+        }
+        $this->log('获取函数计算绑定域名信息成功');
+
+        if (isset($data['certConfig']['certificate']) && $data['certConfig']['certificate'] == $fullchain) {
+            $this->log('函数计算域名 ' . $domain . ' 证书已配置，无需重复操作');
+            return;
+        }
+
+        if ($data['protocol'] == 'HTTP') $data['protocol'] = 'HTTP,HTTPS';
+        $data['certConfig']['certName'] = $cert_name;
+        $data['certConfig']['certificate'] = $fullchain;
+        $data['certConfig']['privateKey'] = $privatekey;
+
+        $param = [
+            'protocol' => $data['protocol'],
+            'routeConfig' => $data['routeConfig'],
+            'certConfig' => $data['certConfig'],
+            'tlsConfig' => $data['tlsConfig'],
+            'wafConfig' => $data['wafConfig'],
+        ];
+        $client->request('PUT', 'UpdateCustomDomain', '/2021-04-06/custom-domains/' . $domain, $param);
+
+        $this->log('函数计算域名 ' . $domain . ' 部署证书成功！');
+    }
+
+    private function deploy_clb($cert_id, $cert_name, $config)
+    {
+        if (empty($config['clb_id'])) throw new Exception('负载均衡实例ID不能为空');
+        if (empty($config['clb_port'])) throw new Exception('HTTPS监听端口不能为空');
+
+        $endpoint = 'slb.' . $config['regionid'] . '.aliyuncs.com';
+        $client = new AliyunClient($this->AccessKeyId, $this->AccessKeySecret, $endpoint, '2014-05-15', $this->proxy);
+
+        $param = [
+            'Action' => 'DescribeServerCertificates',
+            'RegionId' => $config['regionid'],
+        ];
+        try {
+            $data = $client->request($param);
+        } catch (Exception $e) {
+            throw new Exception('获取服务器证书列表失败：' . $e->getMessage());
+        }
+
+        $ServerCertificateId = null;
+        foreach ($data['ServerCertificates']['ServerCertificate'] as $cert) {
+            if ($cert['IsAliCloudCertificate'] == 1 && $cert['AliCloudCertificateId'] == $cert_id) {
+                $ServerCertificateId = $cert['ServerCertificateId'];
+                break;
+            }
+        }
+        if (!$ServerCertificateId) {
+            $param = [
+                'Action' => 'UploadServerCertificate',
+                'RegionId' => $config['regionid'],
+                'AliCloudCertificateId' => $cert_id,
+                'AliCloudCertificateName' => $cert_name,
+                'AliCloudCertificateRegionId' => 'cn-hangzhou',
+            ];
+            try {
+                $data = $client->request($param);
+            } catch (Exception $e) {
+                throw new Exception('服务器证书添加失败：' . $e->getMessage());
+            }
+            $ServerCertificateId = $data['ServerCertificateId'];
+            $this->log('服务器证书添加成功 ServerCertificateId=' . $ServerCertificateId);
+        } else {
+            $this->log('找到已添加的服务器证书 ServerCertificateId=' . $ServerCertificateId);
+        }
+
+        $param = [
+            'Action' => 'DescribeLoadBalancerHTTPSListenerAttribute',
+            'RegionId' => $config['regionid'],
+            'LoadBalancerId' => $config['clb_id'],
+            'ListenerPort' => $config['clb_port'],
+        ];
+        try {
+            $data = $client->request($param);
+        } catch (Exception $e) {
+            throw new Exception('HTTPS监听配置查询失败：' . $e->getMessage());
+        }
+
+        if ($data['ServerCertificateId'] == $ServerCertificateId) {
+            $this->log('负载均衡HTTPS监听已配置该证书，无需重复操作');
+            return;
+        }
+
+        $param = [
+            'Action' => 'SetLoadBalancerHTTPSListenerAttribute',
+            'RegionId' => $config['regionid'],
+            'LoadBalancerId' => $config['clb_id'],
+            'ListenerPort' => $config['clb_port'],
+        ];
+        $keys = ['Bandwidth', 'XForwardedFor', 'Scheduler', 'StickySession', 'StickySessionType', 'CookieTimeout', 'Cookie', 'HealthCheck', 'HealthCheckMethod', 'HealthCheckDomain', 'HealthCheckURI', 'HealthyThreshold', 'UnhealthyThreshold', 'HealthCheckTimeout', 'HealthCheckInterval', 'HealthCheckConnectPort', 'HealthCheckHttpCode', 'ServerCertificateId', 'CACertificateId', 'VServerGroup', 'VServerGroupId', 'XForwardedFor_SLBIP', 'XForwardedFor_SLBID', 'XForwardedFor_proto', 'Gzip', 'AclId', 'AclType', 'AclStatus', 'IdleTimeout', 'RequestTimeout', 'EnableHttp2', 'TLSCipherPolicy', 'Description', 'XForwardedFor_SLBPORT', 'XForwardedFor_ClientSrcPort'];
+        foreach ($keys as $key) {
+            if (isset($data[$key])) $param[$key] = $data[$key];
+        }
+        $param['ServerCertificateId'] = $ServerCertificateId;
+        $client->request($param);
+        $this->log('负载均衡HTTPS监听证书配置成功！');
+    }
+
+    private function deploy_alb($cert_id, $config)
+    {
+        if (empty($config['alb_listener_id'])) throw new Exception('负载均衡监听ID不能为空');
+
+        $endpoint = 'alb.' . $config['regionid'] . '.aliyuncs.com';
+        $client = new AliyunClient($this->AccessKeyId, $this->AccessKeySecret, $endpoint, '2020-06-16', $this->proxy);
+
+        $param = [
+            'Action' => 'ListListenerCertificates',
+            'MaxResults' => 100,
+            'ListenerId' => $config['alb_listener_id'],
+            'CertificateType' => 'Server',
+        ];
+        try {
+            $data = $client->request($param);
+        } catch (Exception $e) {
+            throw new Exception('获取监听证书列表失败：' . $e->getMessage());
+        }
+        foreach ($data['Certificates'] as $cert) {
+            if (strpos($cert['CertificateId'], '-')) $cert['CertificateId'] = substr($cert['CertificateId'], 0, strpos($cert['CertificateId'], '-'));
+            if ($cert['CertificateId'] == $cert_id) {
+                $this->log('负载均衡监听证书已添加，无需重复操作');
+                return;
+            }
+        }
+
+        $param = [
+            'Action' => 'AssociateAdditionalCertificatesWithListener',
+            'ListenerId' => $config['alb_listener_id'],
+            'Certificates.1.CertificateId' => $cert_id . '-cn-hangzhou',
+        ];
+        $client->request($param);
+        $this->log('应用型负载均衡监听证书添加成功！');
+    }
+
+    private function deploy_nlb($cert_id, $config)
+    {
+        if (empty($config['nlb_listener_id'])) throw new Exception('负载均衡监听ID不能为空');
+
+        $endpoint = 'nlb.' . $config['regionid'] . '.aliyuncs.com';
+        $client = new AliyunClient($this->AccessKeyId, $this->AccessKeySecret, $endpoint, '2022-04-30', $this->proxy);
+
+        $param = [
+            'Action' => 'ListListenerCertificates',
+            'MaxResults' => 50,
+            'ListenerId' => $config['nlb_listener_id'],
+            'CertificateType' => 'Server',
+        ];
+        try {
+            $data = $client->request($param);
+        } catch (Exception $e) {
+            throw new Exception('获取监听证书列表失败：' . $e->getMessage());
+        }
+        foreach ($data['Certificates'] as $cert) {
+            if (strpos($cert['CertificateId'], '-')) $cert['CertificateId'] = substr($cert['CertificateId'], 0, strpos($cert['CertificateId'], '-'));
+            if ($cert['CertificateId'] == $cert_id) {
+                $this->log('负载均衡监听证书已添加，无需重复操作');
+                return;
+            }
+        }
+
+        $param = [
+            'Action' => 'AssociateAdditionalCertificatesWithListener',
+            'ListenerId' => $config['nlb_listener_id'],
+            'AdditionalCertificateIds.1' => $cert_id . '-cn-hangzhou',
+        ];
+        $client->request($param);
+        $this->log('网络型负载均衡监听证书添加成功！');
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+}

app/lib/deploy/allwaf.php

@@ -0,0 +1,146 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use Exception;
+
+class allwaf implements DeployInterface
+{
+    private $logger;
+    private $url = 'https://api.allwaf.cn';
+    private $accessKeyId;
+    private $accessKey;
+    private $usertype = 'user';
+    private $proxy;
+    private $accessToken;
+
+    public function __construct($config)
+    {
+        $this->accessKeyId = $config['accessKeyId'];
+        $this->accessKey = $config['accessKey'];
+        $this->proxy = $config['proxy'] == 1;
+    }
+
+    public function check()
+    {
+        if (empty($this->url) || empty($this->accessKeyId) || empty($this->accessKey)) throw new Exception('必填参数不能为空');
+        $this->getAccessToken();
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        $domains = $config['domainList'];
+        if (empty($domains)) throw new Exception('没有设置要部署的域名');
+
+        $this->getAccessToken();
+
+        $params = [
+            'domains' => $domains,
+            'offset' => 0,
+            'size' => 10,
+        ];
+        try {
+            $data = $this->request('/SSLCertService/listSSLCerts', $params);
+        } catch (Exception $e) {
+            throw new Exception('获取证书列表失败：' . $e->getMessage());
+        }
+        $list = json_decode(base64_decode($data['sslCertsJSON']), true);
+        if (!$list || empty($list)) {
+            throw new Exception('证书列表为空');
+        }
+        $this->log('获取证书列表成功(total=' . count($list) . ')');
+
+        $certInfo = openssl_x509_parse($fullchain, true);
+        $cert_name = str_replace('*.', '', $certInfo['subject']['CN']) . '-' . $certInfo['validFrom_time_t'];
+
+        if (!empty($list)) {
+            foreach ($list as $row) {
+                $params = [
+                    'sslCertId' => $row['id'],
+                    'isOn' => true,
+                    'name' => $row['name'],
+                    'description' => $row['description'],
+                    'serverName' => $row['serverName'],
+                    'isCA' => false,
+                    'certData' => base64_encode($fullchain),
+                    'keyData' => base64_encode($privatekey),
+                    'timeBeginAt' => $certInfo['validFrom_time_t'],
+                    'timeEndAt' => $certInfo['validTo_time_t'],
+                    'dnsNames' => $domains,
+                    'commonNames' => [$certInfo['issuer']['CN']],
+                ];
+                $this->request('/SSLCertService/updateSSLCert', $params);
+                $this->log('证书ID:' . $row['id'] . '更新成功！');
+            }
+        } else {
+            $params = [
+                'isOn' => true,
+                'name' => $cert_name,
+                'description' => $cert_name,
+                'serverName' => $certInfo['subject']['CN'],
+                'isCA' => false,
+                'certData' => base64_encode($fullchain),
+                'keyData' => base64_encode($privatekey),
+                'timeBeginAt' => $certInfo['validFrom_time_t'],
+                'timeEndAt' => $certInfo['validTo_time_t'],
+                'dnsNames' => $domains,
+                'commonNames' => [$certInfo['issuer']['CN']],
+            ];
+            $result = $this->request('/SSLCertService/createSSLCert', $params);
+            $this->log('证书ID:' . $result['sslCertId'] . '添加成功！');
+        }
+    }
+
+    private function getAccessToken()
+    {
+        $path = '/APIAccessTokenService/getAPIAccessToken';
+        $params = [
+            'type' => $this->usertype,
+            'accessKeyId' => $this->accessKeyId,
+            'accessKey' => $this->accessKey,
+        ];
+        $result = $this->request($path, $params);
+        if (isset($result['token'])) {
+            $this->accessToken = $result['token'];
+        } else {
+            throw new Exception('登录成功，获取AccessToken失败');
+        }
+    }
+
+    private function request($path, $params = null)
+    {
+        $url = $this->url . $path;
+        $headers = [];
+        $body = null;
+        if ($this->accessToken) {
+            $headers[] = 'X-Cloud-Access-Token: ' . $this->accessToken;
+        }
+        if ($params) {
+            $headers[] = 'Content-Type: application/json';
+            $body = json_encode($params);
+        }
+        $response = curl_client($url, $body, null, null, $headers, $this->proxy);
+        $result = json_decode($response['body'], true);
+        if (isset($result['code']) && $result['code'] == 200) {
+            return isset($result['data']) ? $result['data'] : null;
+        } elseif (isset($result['message'])) {
+            throw new Exception($result['message']);
+        } else {
+            if (!empty($response['body'])) $this->log('Response:' . $response['body']);
+            throw new Exception('返回数据解析失败');
+        }
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+}

app/lib/deploy/aws.php

@@ -0,0 +1,92 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use app\lib\client\AWS as AWSClient;
+use Exception;
+
+class aws implements DeployInterface
+{
+    private $logger;
+    private $AccessKeyId;
+    private $SecretAccessKey;
+    private $proxy;
+
+    public function __construct($config)
+    {
+        $this->AccessKeyId = $config['AccessKeyId'];
+        $this->SecretAccessKey = $config['SecretAccessKey'];
+        $this->proxy = isset($config['proxy']) ? $config['proxy'] == 1 : false;
+    }
+
+    public function check()
+    {
+        if (empty($this->AccessKeyId) || empty($this->SecretAccessKey)) throw new Exception('必填参数不能为空');
+        $client = new AWSClient($this->AccessKeyId, $this->SecretAccessKey, 'iam.amazonaws.com', 'iam', '2010-05-08', 'us-east-1', $this->proxy);
+        $client->requestXml('GET', 'GetUser');
+        return true;
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        if (empty($config['distribution_id'])) throw new Exception('分配ID不能为空');
+        $certInfo = openssl_x509_parse($fullchain, true);
+        if (!$certInfo) throw new Exception('证书解析失败');
+        $config['cert_name'] = str_replace('*.', '', $certInfo['subject']['CN']) . '-' . $certInfo['validFrom_time_t'];
+
+        if (isset($info['cert_id']) && isset($info['cert_name']) && $info['cert_name'] == $config['cert_name']) {
+            $cert_id = $info['cert_id'];
+            $this->log('证书已上传：' . $cert_id);
+        } else {
+            $cert_id = $this->get_cert_id($fullchain, $privatekey);
+            $this->log('证书上传成功：' . $cert_id);
+            $info['cert_id'] = $cert_id;
+            $info['cert_name'] = $config['cert_name'];
+            usleep(500000);
+        }
+
+        $client = new AWSClient($this->AccessKeyId, $this->SecretAccessKey, 'cloudfront.amazonaws.com', 'cloudfront', '2020-05-31', 'us-east-1', $this->proxy);
+        try {
+            $data = $client->requestXmlN('GET', '/distribution/' . $config['distribution_id'] . '/config', [], null, true);
+        } catch (Exception $e) {
+            throw new Exception('获取分配信息失败：' . $e->getMessage());
+        }
+
+        $data['ViewerCertificate']['ACMCertificateArn'] = $cert_id;
+        $data['ViewerCertificate']['CloudFrontDefaultCertificate'] = false;
+        $xml = new \SimpleXMLElement('<?xml version="1.0" encoding="utf-8"?><DistributionConfig></DistributionConfig>');
+        $client->requestXmlN('PUT', '/distribution/' . $config['distribution_id'] . '/config', $data, $xml);
+        $this->log('分配ID: ' . $config['distribution_id'] . ' 证书部署成功！');
+    }
+
+    private function get_cert_id($fullchain, $privatekey)
+    {
+        $cert = explode('-----END CERTIFICATE-----', $fullchain)[0] . '-----END CERTIFICATE-----';
+        $param = [
+            'Certificate' => base64_encode($cert),
+            'PrivateKey' => base64_encode($privatekey),
+        ];
+
+        $client = new AWSClient($this->AccessKeyId, $this->SecretAccessKey, 'acm.us-east-1.amazonaws.com', 'acm', '', 'us-east-1', $this->proxy);
+        try {
+            $data = $client->request('POST', 'CertificateManager.ImportCertificate', $param);
+            $cert_id = $data['CertificateArn'];
+        } catch (Exception $e) {
+            throw new Exception('上传证书失败：' . $e->getMessage());
+        }
+        return $cert_id;
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+}

app/lib/deploy/baidu.php

@@ -0,0 +1,73 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use app\lib\client\BaiduCloud;
+use Exception;
+
+class baidu implements DeployInterface
+{
+    private $logger;
+    private $AccessKeyId;
+    private $SecretAccessKey;
+    private $proxy;
+
+    public function __construct($config)
+    {
+        $this->AccessKeyId = $config['AccessKeyId'];
+        $this->SecretAccessKey = $config['SecretAccessKey'];
+        $this->proxy = isset($config['proxy']) ? $config['proxy'] == 1 : false;
+    }
+
+    public function check()
+    {
+        if (empty($this->AccessKeyId) || empty($this->SecretAccessKey)) throw new Exception('必填参数不能为空');
+        $client = new BaiduCloud($this->AccessKeyId, $this->SecretAccessKey, 'cdn.baidubce.com', $this->proxy);
+        $client->request('GET', '/v2/domain');
+        return true;
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        if (empty($config['domain'])) throw new Exception('绑定的域名不能为空');
+        $certInfo = openssl_x509_parse($fullchain, true);
+        if (!$certInfo) throw new Exception('证书解析失败');
+        $config['cert_name'] = str_replace('*.', '', $certInfo['subject']['CN']) . '-' . $certInfo['validFrom_time_t'];
+
+        $client = new BaiduCloud($this->AccessKeyId, $this->SecretAccessKey, 'cdn.baidubce.com', $this->proxy);
+        try {
+            $data = $client->request('GET', '/v2/' . $config['domain'] . '/certificates');
+            if (isset($data['certName']) && $data['certName'] == $config['cert_name']) {
+                $this->log('CDN域名 ' . $config['domain'] . ' 证书已存在，无需重复部署');
+                return;
+            }
+        } catch (Exception $e) {
+            $this->log($e->getMessage());
+        }
+
+        $param = [
+            'httpsEnable' => 'ON',
+            'certificate' => [
+                'certName' => $config['cert_name'],
+                'certServerData' => $fullchain,
+                'certPrivateData' => $privatekey,
+            ],
+        ];
+        $data = $client->request('PUT', '/v2/' . $config['domain'] . '/certificates', null, $param);
+        $info['cert_id'] = $data['certId'];
+        $this->log('CDN域名 ' . $config['domain'] . ' 证书部署成功！');
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+}

app/lib/deploy/baishan.php

@@ -0,0 +1,85 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use Exception;
+
+class baishan implements DeployInterface
+{
+    private $logger;
+    private $url = 'https://cdn.api.baishan.com';
+    private $token;
+    private $proxy;
+
+    public function __construct($config)
+    {
+        $this->token = $config['token'];
+        $this->proxy = $config['proxy'] == 1;
+    }
+
+    public function check()
+    {
+        if (empty($this->token)) throw new Exception('token不能为空');
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        if (empty($config['id'])) throw new Exception('证书ID不能为空');
+
+        $certInfo = openssl_x509_parse($fullchain, true);
+        if (!$certInfo) throw new Exception('证书解析失败');
+        $cert_name = str_replace('*.', '', $certInfo['subject']['CN']) . '-' . $certInfo['validFrom_time_t'];
+
+        $params = [
+            'cert_id' => $config['id'],
+            'name' => $cert_name,
+            'certificate' => $fullchain,
+            'key' => $privatekey,
+        ];
+        try {
+            $this->request('/v2/domain/certificate?token=' . $this->token, $params);
+        } catch (Exception $e) {
+            if (strpos($e->getMessage(), 'this certificate is exists') !== false) {
+                $this->log('证书ID:' . $config['id'] . '已存在，无需更新');
+                return;
+            }
+            throw new Exception($e->getMessage());
+        }
+
+        $this->log('证书ID:' . $config['id'] . '更新成功！');
+    }
+
+    private function request($path, $params = null)
+    {
+        $url = $this->url . $path;
+        $headers = [];
+        $body = null;
+        if ($params) {
+            $headers[] = 'Content-Type: application/json';
+            $body = json_encode($params);
+        }
+        $response = curl_client($url, $body, null, null, $headers, $this->proxy);
+        $result = json_decode($response['body'], true);
+        if (isset($result['code']) && $result['code'] == 0) {
+            return $result;
+        } elseif (isset($result['message'])) {
+            throw new Exception($result['message']);
+        } else {
+            if (!empty($response['body'])) $this->log('Response:' . $response['body']);
+            throw new Exception('请求失败(httpCode=' . $response['code'] . ')');
+        }
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+}

app/lib/deploy/btpanel.php

@@ -0,0 +1,157 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use Exception;
+
+class btpanel implements DeployInterface
+{
+    private $logger;
+    private $url;
+    private $key;
+    private $proxy;
+
+    public function __construct($config)
+    {
+        $this->url = rtrim($config['url'], '/');
+        $this->key = $config['key'];
+        $this->proxy = $config['proxy'] == 1;
+    }
+
+    public function check()
+    {
+        if (empty($this->url) || empty($this->key)) throw new Exception('请填写面板地址和接口密钥');
+
+        $path = '/config?action=get_config';
+        $response = $this->request($path, []);
+        $result = json_decode($response, true);
+        if (isset($result['status']) && ($result['status']==1 || isset($result['sites_path']))) {
+            return true;
+        } else {
+            throw new Exception(isset($result['msg']) ? $result['msg'] : '面板地址无法连接');
+        }
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        if ($config['type'] == '1') {
+            $this->deployPanel($fullchain, $privatekey);
+            $this->log("面板证书部署成功");
+            return;
+        }
+        $sites = explode("\n", $config['sites']);
+        $success = 0;
+        $errmsg = null;
+        foreach ($sites as $site) {
+            $siteName = trim($site);
+            if (empty($siteName)) continue;
+            if ($config['type'] == '2') {
+                try {
+                    $this->deployMailSys($siteName, $fullchain, $privatekey);
+                    $this->log("邮局域名 {$siteName} 证书部署成功");
+                    $success++;
+                } catch (Exception $e) {
+                    $errmsg = $e->getMessage();
+                    $this->log("邮局域名 {$siteName} 证书部署失败：" . $errmsg);
+                }
+            } else {
+                try {
+                    $this->deploySite($siteName, $fullchain, $privatekey);
+                    $this->log("网站 {$siteName} 证书部署成功");
+                    $success++;
+                } catch (Exception $e) {
+                    $errmsg = $e->getMessage();
+                    $this->log("网站 {$siteName} 证书部署失败：" . $errmsg);
+                }
+            }
+        }
+        if ($success == 0) {
+            throw new Exception($errmsg ? $errmsg : '要部署的网站不存在');
+        }
+    }
+
+    private function deployPanel($fullchain, $privatekey)
+    {
+        $path = '/config?action=SavePanelSSL';
+        $data = [
+            'privateKey' => $privatekey,
+            'certPem' => $fullchain,
+        ];
+        $response = $this->request($path, $data);
+        $result = json_decode($response, true);
+        if (isset($result['status']) && $result['status']) {
+            return true;
+        } elseif (isset($result['msg'])) {
+            throw new Exception($result['msg']);
+        } else {
+            throw new Exception($response ? $response : '返回数据解析失败');
+        }
+    }
+
+    private function deploySite($siteName, $fullchain, $privatekey)
+    {
+        $path = '/site?action=SetSSL';
+        $data = [
+            'type' => '0',
+            'siteName' => $siteName,
+            'key' => $privatekey,
+            'csr' => $fullchain,
+        ];
+        $response = $this->request($path, $data);
+        $result = json_decode($response, true);
+        if (isset($result['status']) && $result['status']) {
+            return true;
+        } elseif (isset($result['msg'])) {
+            throw new Exception($result['msg']);
+        } else {
+            throw new Exception($response ? $response : '返回数据解析失败');
+        }
+    }
+
+    private function deployMailSys($domain, $fullchain, $privatekey)
+    {
+        $path = '/plugin?action=a&name=mail_sys&s=set_mail_certificate_multiple';
+        $data = [
+            'domain' => $domain,
+            'key' => $privatekey,
+            'csr' => $fullchain,
+            'act' => 'add',
+        ];
+        $response = $this->request($path, $data);
+        $result = json_decode($response, true);
+        if (isset($result['status']) && $result['status']) {
+            return true;
+        } elseif (isset($result['msg'])) {
+            throw new Exception($result['msg']);
+        } else {
+            throw new Exception($response ? $response : '返回数据解析失败');
+        }
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+
+    private function request($path, $params)
+    {
+        $url = $this->url . $path;
+
+        $now_time = time();
+        $post_data = [
+            'request_token' => md5($now_time . md5($this->key)),
+            'request_time' => $now_time
+        ];
+        $post_data = array_merge($post_data, $params);
+        $response = curl_client($url, $post_data, null, null, null, $this->proxy);
+        return $response['body'];
+    }
+}

app/lib/deploy/cachefly.php

@@ -0,0 +1,67 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use Exception;
+
+class cachefly implements DeployInterface
+{
+    private $logger;
+    private $url = 'https://api.cachefly.com/api/2.5';
+    private $apikey;
+    private $proxy;
+
+    public function __construct($config)
+    {
+        $this->apikey = $config['apikey'];
+        $this->proxy = $config['proxy'] == 1;
+    }
+
+    public function check()
+    {
+        if (empty($this->apikey)) throw new Exception('API令牌不能为空');
+        $this->request('/accounts/me');
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        $params = [
+            'certificate' => $fullchain,
+            'certificateKey' => $privatekey,
+        ];
+        $this->request('/certificates', $params);
+        $this->log('证书上传成功！');
+    }
+
+    private function request($path, $params = null, $method = null)
+    {
+        $url = $this->url . $path;
+        $headers = ['x-cf-authorization: Bearer ' . $this->apikey];
+        $body = null;
+        if ($params) {
+            $headers[] = 'Content-Type: application/json';
+            $body = json_encode($params);
+        }
+        $response = curl_client($url, $body, null, null, $headers, $this->proxy, $method);
+        $result = json_decode($response['body'], true);
+        if ($response['code'] >= 200 && $response['code'] < 300) {
+            return $result;
+        } else {
+            if (!empty($response['body'])) $this->log('Response:' . $response['body']);
+            throw new Exception('请求失败(httpCode=' . $response['code'] . ')');
+        }
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+}

app/lib/deploy/cdnfly.php

@@ -0,0 +1,75 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use Exception;
+
+class cdnfly implements DeployInterface
+{
+    private $logger;
+    private $url;
+    private $api_key;
+    private $api_secret;
+    private $proxy;
+
+    public function __construct($config)
+    {
+        $this->url = rtrim($config['url'], '/');
+        $this->api_key = $config['api_key'];
+        $this->api_secret = $config['api_secret'];
+        $this->proxy = $config['proxy'] == 1;
+    }
+
+    public function check()
+    {
+        if (empty($this->url) || empty($this->api_key) || empty($this->api_secret)) throw new Exception('必填参数不能为空');
+        $this->request('/v1/user');
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        $id = $config['id'];
+        if (empty($id)) throw new Exception('证书ID不能为空');
+
+        $params = [
+            'type' => 'custom',
+            'cert' => $fullchain,
+            'key' => $privatekey,
+        ];
+        $this->request('/v1/certs/' . $id, $params, 'PUT');
+        $this->log("证书ID:{$id}更新成功！");
+    }
+
+    private function request($path, $params = null, $method = null)
+    {
+        $url = $this->url . $path;
+        $headers = ['api-key: ' . $this->api_key, 'api-secret: ' . $this->api_secret];
+        $body = null;
+        if ($params) {
+            $headers[] = 'Content-Type: application/json';
+            $body = json_encode($params);
+        }
+        $response = curl_client($url, $body, null, null, $headers, $this->proxy, $method);
+        $result = json_decode($response['body'], true);
+        if (isset($result['code']) && $result['code'] == 0) {
+            return isset($result['data']) ? $result['data'] : null;
+        } elseif (isset($result['msg'])) {
+            throw new Exception($result['msg']);
+        } else {
+            throw new Exception('返回数据解析失败');
+        }
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+}

app/lib/deploy/ctyun.php

@@ -0,0 +1,184 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use app\lib\client\Ctyun as CtyunClient;
+use Exception;
+
+class ctyun implements DeployInterface
+{
+    private $logger;
+    private $AccessKeyId;
+    private $SecretAccessKey;
+    private $proxy;
+
+    public function __construct($config)
+    {
+        $this->AccessKeyId = $config['AccessKeyId'];
+        $this->SecretAccessKey = $config['SecretAccessKey'];
+        $this->proxy = isset($config['proxy']) ? $config['proxy'] == 1 : false;
+    }
+
+    public function check()
+    {
+        if (empty($this->AccessKeyId) || empty($this->SecretAccessKey)) throw new Exception('必填参数不能为空');
+        $client = new CtyunClient($this->AccessKeyId, $this->SecretAccessKey, 'ctcdn-global.ctapi.ctyun.cn', $this->proxy);
+        $client->request('GET', '/v1/cert/query-cert-list');
+        return true;
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        $certInfo = openssl_x509_parse($fullchain, true);
+        if (!$certInfo) throw new Exception('证书解析失败');
+        $config['cert_name'] = str_replace('*.', '', $certInfo['subject']['CN']) . '-' . $certInfo['validFrom_time_t'];
+        if ($config['product'] == 'cdn') {
+            $this->deploy_cdn($fullchain, $privatekey, $config);
+        } elseif ($config['product'] == 'icdn') {
+            $this->deploy_icdn($fullchain, $privatekey, $config);
+        } elseif ($config['product'] == 'accessone') {
+            $this->deploy_accessone($fullchain, $privatekey, $config);
+        }
+    }
+
+    private function deploy_cdn($fullchain, $privatekey, $config)
+    {
+        $client = new CtyunClient($this->AccessKeyId, $this->SecretAccessKey, 'ctcdn-global.ctapi.ctyun.cn', $this->proxy);
+        $param = [
+            'name' => $config['cert_name'],
+            'key' => $privatekey,
+            'certs' => $fullchain,
+        ];
+        try {
+            $client->request('POST', '/v1/cert/creat-cert', null, $param);
+        } catch (Exception $e) {
+            if (strpos($e->getMessage(), '已存在重名的证书') !== false) {
+                $this->log('已存在重名的证书 cert_name=' . $config['cert_name']);
+            } else {
+                throw new Exception('上传证书失败：' . $e->getMessage());
+            }
+        }
+        $this->log('上传证书成功 cert_name=' . $config['cert_name']);
+
+        $param = [
+            'domain' => $config['domain'],
+            'https_status' => 'on',
+            'cert_name' => $config['cert_name'],
+        ];
+        try {
+            $client->request('POST', '/v1/domain/update-domain', null, $param);
+        } catch (Exception $e) {
+            if (strpos($e->getMessage(), '请求已提交，请勿重复操作！') === false) {
+                throw new Exception($e->getMessage());
+            }
+        }
+
+        $this->log('CDN域名 ' . $config['domain'] . ' 部署证书成功！');
+    }
+
+    private function deploy_icdn($fullchain, $privatekey, $config)
+    {
+        $client = new CtyunClient($this->AccessKeyId, $this->SecretAccessKey, 'icdn-global.ctapi.ctyun.cn', $this->proxy);
+        $param = [
+            'name' => $config['cert_name'],
+            'key' => $privatekey,
+            'certs' => $fullchain,
+        ];
+        try {
+            $client->request('POST', '/v1/cert/creat-cert', null, $param);
+        } catch (Exception $e) {
+            if (strpos($e->getMessage(), '已存在重名的证书') !== false) {
+                $this->log('已存在重名的证书 cert_name=' . $config['cert_name']);
+            } else {
+                throw new Exception('上传证书失败：' . $e->getMessage());
+            }
+        }
+        $this->log('上传证书成功 cert_name=' . $config['cert_name']);
+
+        $param = [
+            'domain' => $config['domain'],
+            'https_status' => 'on',
+            'cert_name' => $config['cert_name'],
+        ];
+        try {
+            $client->request('POST', '/v1/domain/update-domain', null, $param);
+        } catch (Exception $e) {
+            if (strpos($e->getMessage(), '请求已提交，请勿重复操作！') === false) {
+                throw new Exception($e->getMessage());
+            }
+        }
+
+        $this->log('CDN域名 ' . $config['domain'] . ' 部署证书成功！');
+    }
+
+    private function deploy_accessone($fullchain, $privatekey, $config)
+    {
+        $client = new CtyunClient($this->AccessKeyId, $this->SecretAccessKey, 'accessone-global.ctapi.ctyun.cn', $this->proxy);
+        $param = [
+            'name' => $config['cert_name'],
+            'key' => $privatekey,
+            'certs' => $fullchain,
+        ];
+        try {
+            $client->request('POST', '/ctapi/v1/accessone/cert/create', null, $param);
+        } catch (Exception $e) {
+            if (strpos($e->getMessage(), '已存在重名的证书') !== false) {
+                $this->log('已存在重名的证书 cert_name=' . $config['cert_name']);
+            } else {
+                throw new Exception('上传证书失败：' . $e->getMessage());
+            }
+        }
+        $this->log('上传证书成功 cert_name=' . $config['cert_name']);
+
+        $param = [
+            'domain' => $config['domain'],
+            'product_code' => '020',
+        ];
+        try {
+            $result = $client->request('POST', '/ctapi/v1/accessone/domain/config', null, $param);
+        } catch (Exception $e) {
+            throw new Exception('查询域名配置失败：' . $e->getMessage());
+        }
+
+        if ($result['https_status'] == 'on' && $result['cert_name'] == $config['cert_name']) {
+            $this->log('边缘安全加速域名 ' . $config['domain'] . ' 证书已部署，无需重复操作！');
+            return;
+        }
+
+        $result['https_status'] = 'on';
+        $result['cert_name'] = $config['cert_name'];
+        $exclude_keys = ['status', 'area_scope', 'cname', 'insert_date', 'status_date', 'record_status', 'record_num', 'customer_name', 'outlink_replace_filter', 'website_ipv6_access_mark', 'websocket_speed', 'dynamic_config', 'dynamic_ability'];
+        foreach ($result as $key => $value) {
+            if (in_array($key, $exclude_keys) || is_array($value) && empty($value)) {
+                unset($result[$key]);
+            }
+        }
+        if (isset($result['origin'])) {
+            foreach ($result['origin'] as &$origin) {
+                $origin['weight'] = strval($origin['weight']);
+            }
+        }
+        try {
+            $client->request('POST', '/ctapi/v1/accessone/domain/modify_config', null, $result);
+        } catch (Exception $e) {
+            if (strpos($e->getMessage(), '请求已提交，请勿重复操作！') === false) {
+                throw new Exception($e->getMessage());
+            }
+        }
+
+        $this->log('边缘安全加速域名 ' . $config['domain'] . ' 部署证书成功！');
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+}

app/lib/deploy/doge.php

@@ -0,0 +1,122 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use Exception;
+
+class doge implements DeployInterface
+{
+    private $logger;
+    private $AccessKey;
+    private $SecretKey;
+    private $proxy;
+
+    public function __construct($config)
+    {
+        $this->AccessKey = $config['AccessKey'];
+        $this->SecretKey = $config['SecretKey'];
+        $this->proxy = isset($config['proxy']) ? $config['proxy'] == 1 : false;
+    }
+
+    public function check()
+    {
+        if (empty($this->AccessKey) || empty($this->SecretKey)) throw new Exception('必填参数不能为空');
+        $this->request('/cdn/cert/list.json');
+        return true;
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        $domain = $config['domain'];
+        if (empty($domain)) throw new Exception('绑定的域名不能为空');
+
+        $certInfo = openssl_x509_parse($fullchain, true);
+        if (!$certInfo) throw new Exception('证书解析失败');
+        $cert_name = str_replace('*.', '', $certInfo['subject']['CN']) . '-' . $certInfo['validFrom_time_t'];
+
+        $cert_id = $this->get_cert_id($fullchain, $privatekey, $cert_name);
+
+        $param = [
+            'id' => $cert_id,
+            'domain' => $domain,
+        ];
+        $this->request('/cdn/cert/bind.json', $param);
+
+        $this->log('CDN域名 ' . $domain . ' 绑定证书成功！');
+        $info['cert_id'] = $cert_id;
+    }
+
+    private function get_cert_id($fullchain, $privatekey, $cert_name)
+    {
+        $cert_id = null;
+
+        $data = $this->request('/cdn/cert/list.json');
+        foreach ($data['certs'] as $cert) {
+            if ($cert_name == $cert['note']) {
+                $cert_id = $cert['id'];
+                $this->log('证书' . $cert_name . '已存在，证书ID:' . $cert_id);
+            } elseif ($cert['expire'] < time() && $cert['domainCount'] == 0) {
+                try {
+                    $this->request('/cdn/cert/delete.json', ['id' => $cert['id']]);
+                    $this->log('证书' . $cert['name'] . '已过期，删除证书成功');
+                } catch (Exception $e) {
+                    $this->log('证书' . $cert['name'] . '已过期，删除证书失败:' . $e->getMessage());
+                }
+                usleep(300000);
+            }
+        }
+
+        if (!$cert_id) {
+            $param = [
+                'note' => $cert_name,
+                'cert' => $fullchain,
+                'private' => $privatekey,
+            ];
+            try {
+                $data = $this->request('/cdn/cert/upload.json', $param);
+            } catch (Exception $e) {
+                throw new Exception('上传证书失败:' . $e->getMessage());
+            }
+            $this->log('上传证书成功，证书ID:' . $data['id']);
+            $cert_id = $data['id'];
+            usleep(500000);
+        }
+        return $cert_id;
+    }
+
+    private function request($path, $data = null, $json = false)
+    {
+        $body = null;
+        if($data){
+            $body = $json ? json_encode($data) : http_build_query($data);
+        }
+        $signStr = $path . "\n" . $body;
+        $sign = hash_hmac('sha1', $signStr, $this->SecretKey);
+        $authorization = "TOKEN " . $this->AccessKey . ":" . $sign;
+        $headers = ['Authorization: ' . $authorization];
+        if($body && $json) $headers[] = 'Content-Type: application/json';
+        $url = 'https://api.dogecloud.com'.$path;
+        $response = curl_client($url, $body, null, null, $headers, $this->proxy);
+        $result = json_decode($response['body'], true);
+        if(isset($result['code']) && $result['code'] == 200){
+            return isset($result['data']) ? $result['data'] : true;
+        }elseif(isset($result['msg'])){
+            throw new Exception($result['msg']);
+        }else{
+            throw new Exception('请求失败');
+        }
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+}

app/lib/deploy/ftp.php

@@ -0,0 +1,113 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use Exception;
+
+class ftp implements DeployInterface
+{
+    private $logger;
+    private $config;
+
+    public function __construct($config)
+    {
+        $this->config = $config;
+    }
+
+    public function check()
+    {
+        $this->connect();
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        $conn_id = $this->connect();
+        ftp_pasv($conn_id, true);
+        if ($config['format'] == 'pem') {
+            $temp_stream = fopen('php://temp', 'r+');
+            fwrite($temp_stream, $fullchain);
+            rewind($temp_stream);
+            if (ftp_fput($conn_id, $config['pem_cert_file'], $temp_stream, FTP_BINARY)) {
+                $this->log('证书文件上传成功：' . $config['pem_cert_file']);
+            } else {
+                fclose($temp_stream);
+                ftp_close($conn_id);
+                throw new Exception('证书文件上传失败：' . $config['pem_cert_file']);
+            }
+            fclose($temp_stream);
+
+            $temp_stream = fopen('php://temp', 'r+');
+            fwrite($temp_stream, $privatekey);
+            rewind($temp_stream);
+            if (ftp_fput($conn_id, $config['pem_key_file'], $temp_stream, FTP_BINARY)) {
+                $this->log('私钥文件上传成功：' . $config['pem_key_file']);
+            } else {
+                fclose($temp_stream);
+                ftp_close($conn_id);
+                throw new Exception('私钥文件上传失败：' . $config['pem_key_file']);
+            }
+            fclose($temp_stream);
+        } elseif ($config['format'] == 'pfx') {
+            $pfx = \app\lib\CertHelper::getPfx($fullchain, $privatekey, $config['pfx_pass'] ? $config['pfx_pass'] : null);
+
+            $temp_stream = fopen('php://temp', 'r+');
+            fwrite($temp_stream, $pfx);
+            rewind($temp_stream);
+            if (ftp_fput($conn_id, $config['pfx_file'], $temp_stream, FTP_BINARY)) {
+                $this->log('PFX证书文件上传成功：' . $config['pfx_file']);
+            } else {
+                fclose($temp_stream);
+                ftp_close($conn_id);
+                throw new Exception('PFX证书文件上传失败：' . $config['pfx_file']);
+            }
+            fclose($temp_stream);
+        }
+        ftp_close($conn_id);
+    }
+
+    private function connect()
+    {
+        if (!function_exists('ftp_connect')) {
+            throw new Exception('ftp扩展未安装');
+        }
+        if (empty($this->config['host']) || empty($this->config['port']) || empty($this->config['username']) || empty($this->config['password'])) {
+            throw new Exception('必填参数不能为空');
+        }
+        if (!filter_var($this->config['host'], FILTER_VALIDATE_IP) && !filter_var($this->config['host'], FILTER_VALIDATE_DOMAIN)) {
+            throw new Exception('主机地址不合法');
+        }
+        if (!is_numeric($this->config['port']) || $this->config['port'] < 1 || $this->config['port'] > 65535) {
+            throw new Exception('端口不合法');
+        }
+
+        if ($this->config['secure'] == '1') {
+            $conn_id = ftp_ssl_connect($this->config['host'], intval($this->config['port']), 10);
+            if (!$conn_id) {
+                throw new Exception('FTP服务器无法连接(SSL)');
+            }
+        } else {
+            $conn_id = ftp_connect($this->config['host'], intval($this->config['port']), 10);
+            if (!$conn_id) {
+                throw new Exception('FTP服务器无法连接');
+            }
+        }
+        if (!ftp_login($conn_id, $this->config['username'], $this->config['password'])) {
+            ftp_close($conn_id);
+            throw new Exception('FTP登录失败');
+        }
+        return $conn_id;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+
+    public function setLogger($logger)
+    {
+        $this->logger = $logger;
+    }
+}

app/lib/deploy/gcore.php

@@ -0,0 +1,77 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use Exception;
+
+class gcore implements DeployInterface
+{
+    private $logger;
+    private $url = 'https://api.gcore.com';
+    private $apikey;
+    private $proxy;
+
+    public function __construct($config)
+    {
+        $this->apikey = $config['apikey'];
+        $this->proxy = $config['proxy'] == 1;
+    }
+
+    public function check()
+    {
+        if (empty($this->apikey)) throw new Exception('API令牌不能为空');
+        $this->request('/iam/clients/me');
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        $id = $config['id'];
+        if (empty($id)) throw new Exception('证书ID不能为空');
+
+        $params = [
+            'name' => $config['name'],
+            'sslCertificate' => $fullchain,
+            'sslPrivateKey' => $privatekey,
+            'validate_root_ca' => true,
+        ];
+        $this->request('/cdn/sslData/' . $id, $params, 'PUT');
+        $this->log('证书ID:' . $id . '更新成功！');
+    }
+
+    private function request($path, $params = null, $method = null)
+    {
+        $url = $this->url . $path;
+        $headers = ['Authorization: APIKey ' . $this->apikey];
+        $body = null;
+        if ($params) {
+            $headers[] = 'Content-Type: application/json';
+            $body = json_encode($params);
+        }
+        $response = curl_client($url, $body, null, null, $headers, $this->proxy, $method);
+        $result = json_decode($response['body'], true);
+        if ($response['code'] >= 200 && $response['code'] < 300) {
+            return $result;
+        } elseif (isset($result['message']['message'])) {
+            throw new Exception($result['message']['message']);
+        } elseif (isset($result['errors'])) {
+            $errors = $result['errors'][array_key_first($result['errors'])];
+            throw new Exception($errors[0]);
+        } else {
+            if (!empty($response['body'])) $this->log('Response:' . $response['body']);
+            throw new Exception('请求失败(httpCode=' . $response['code'] . ')');
+        }
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+}

app/lib/deploy/goedge.php

@@ -0,0 +1,154 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use Exception;
+
+class goedge implements DeployInterface
+{
+    private $logger;
+    private $url;
+    private $accessKeyId;
+    private $accessKey;
+    private $usertype;
+    private $systype;
+    private $proxy;
+    private $accessToken;
+
+    public function __construct($config)
+    {
+        $this->url = rtrim($config['url'], '/');
+        $this->accessKeyId = $config['accessKeyId'];
+        $this->accessKey = $config['accessKey'];
+        $this->usertype = $config['usertype'];
+        $this->systype = $config['systype'];
+        $this->proxy = $config['proxy'] == 1;
+    }
+
+    public function check()
+    {
+        if (empty($this->url) || empty($this->accessKeyId) || empty($this->accessKey)) throw new Exception('必填参数不能为空');
+        $this->getAccessToken();
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        $domains = $config['domainList'];
+        if (empty($domains)) throw new Exception('没有设置要部署的域名');
+
+        $this->getAccessToken();
+
+        $params = [
+            'domains' => $domains,
+            'offset' => 0,
+            'size' => 10,
+        ];
+        try {
+            $data = $this->request('/SSLCertService/listSSLCerts', $params);
+        } catch (Exception $e) {
+            throw new Exception('获取证书列表失败：' . $e->getMessage());
+        }
+        $list = json_decode(base64_decode($data['sslCertsJSON']), true);
+        if ($list === false) {
+            throw new Exception('证书列表为空');
+        }
+        $this->log('获取证书列表成功(total=' . count($list) . ')');
+
+        $certInfo = openssl_x509_parse($fullchain, true);
+        $cert_name = str_replace('*.', '', $certInfo['subject']['CN']) . '-' . $certInfo['validFrom_time_t'];
+
+        if (!empty($list)) {
+            foreach ($list as $row) {
+                $params = [
+                    'sslCertId' => $row['id'],
+                    'isOn' => true,
+                    'name' => $row['name'],
+                    'description' => $row['description'],
+                    'serverName' => $row['serverName'],
+                    'isCA' => false,
+                    'certData' => base64_encode($fullchain),
+                    'keyData' => base64_encode($privatekey),
+                    'timeBeginAt' => $certInfo['validFrom_time_t'],
+                    'timeEndAt' => $certInfo['validTo_time_t'],
+                    'dnsNames' => $domains,
+                    'commonNames' => [$certInfo['issuer']['CN']],
+                ];
+                $this->request('/SSLCertService/updateSSLCert', $params);
+                $this->log('证书ID:' . $row['id'] . '更新成功！');
+            }
+        } else {
+            $params = [
+                'isOn' => true,
+                'name' => $cert_name,
+                'description' => $cert_name,
+                'serverName' => $certInfo['subject']['CN'],
+                'isCA' => false,
+                'certData' => base64_encode($fullchain),
+                'keyData' => base64_encode($privatekey),
+                'timeBeginAt' => $certInfo['validFrom_time_t'],
+                'timeEndAt' => $certInfo['validTo_time_t'],
+                'dnsNames' => $domains,
+                'commonNames' => [$certInfo['issuer']['CN']],
+            ];
+            $result = $this->request('/SSLCertService/createSSLCert', $params);
+            $this->log('证书ID:' . $result['sslCertId'] . '添加成功！');
+        }
+    }
+
+    private function getAccessToken()
+    {
+        $path = '/APIAccessTokenService/getAPIAccessToken';
+        $params = [
+            'type' => $this->usertype,
+            'accessKeyId' => $this->accessKeyId,
+            'accessKey' => $this->accessKey,
+        ];
+        $result = $this->request($path, $params);
+        if (isset($result['token'])) {
+            $this->accessToken = $result['token'];
+        } else {
+            throw new Exception('登录成功，获取AccessToken失败');
+        }
+    }
+
+    private function request($path, $params = null)
+    {
+        $url = $this->url . $path;
+        $headers = [];
+        $body = null;
+        if ($this->accessToken) {
+            if ($this->systype == '1') {
+                $headers[] = 'X-Cloud-Access-Token: ' . $this->accessToken;
+            } else {
+                $headers[] = 'X-Edge-Access-Token: ' . $this->accessToken;
+            }
+        }
+        if ($params) {
+            $headers[] = 'Content-Type: application/json';
+            $body = json_encode($params);
+        }
+        $response = curl_client($url, $body, null, null, $headers, $this->proxy);
+        $result = json_decode($response['body'], true);
+        if (isset($result['code']) && $result['code'] == 200) {
+            return isset($result['data']) ? $result['data'] : null;
+        } elseif (isset($result['message'])) {
+            throw new Exception($result['message']);
+        } else {
+            if (!empty($response['body'])) $this->log('Response:' . $response['body']);
+            throw new Exception('返回数据解析失败');
+        }
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+}

app/lib/deploy/huawei.php

@@ -0,0 +1,149 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use app\lib\client\HuaweiCloud;
+use Exception;
+
+class huawei implements DeployInterface
+{
+    private $logger;
+    private $AccessKeyId;
+    private $SecretAccessKey;
+    private $proxy;
+
+    public function __construct($config)
+    {
+        $this->AccessKeyId = $config['AccessKeyId'];
+        $this->SecretAccessKey = $config['SecretAccessKey'];
+        $this->proxy = isset($config['proxy']) ? $config['proxy'] == 1 : false;
+    }
+
+    public function check()
+    {
+        if (empty($this->AccessKeyId) || empty($this->SecretAccessKey)) throw new Exception('必填参数不能为空');
+        $client = new HuaweiCloud($this->AccessKeyId, $this->SecretAccessKey, 'scm.cn-north-4.myhuaweicloud.com', $this->proxy);
+        $client->request('GET', '/v3/scm/certificates');
+        return true;
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        $certInfo = openssl_x509_parse($fullchain, true);
+        if (!$certInfo) throw new Exception('证书解析失败');
+        $config['cert_name'] = str_replace('*.', '', $certInfo['subject']['CN']) . '-' . $certInfo['validFrom_time_t'];
+        if ($config['product'] == 'cdn') {
+            $this->deploy_cdn($fullchain, $privatekey, $config);
+        } elseif ($config['product'] == 'elb') {
+            $this->deploy_elb($fullchain, $privatekey, $config);
+        } elseif ($config['product'] == 'waf') {
+            $this->deploy_waf($fullchain, $privatekey, $config);
+        }
+    }
+
+    private function deploy_cdn($fullchain, $privatekey, $config)
+    {
+        if (empty($config['domain'])) throw new Exception('绑定的域名不能为空');
+        $client = new HuaweiCloud($this->AccessKeyId, $this->SecretAccessKey, 'cdn.myhuaweicloud.com', $this->proxy);
+        $param = [
+            'configs' => [
+                'https' => [
+                    'https_status' => 'on',
+                    'certificate_type' => 'server',
+                    'certificate_source' => 0,
+                    'certificate_name' => $config['cert_name'],
+                    'certificate_value' => $fullchain,
+                    'private_key' => $privatekey,
+                ],
+            ],
+        ];
+        $client->request('PUT', '/v1.1/cdn/configuration/domains/' . $config['domain'] . '/configs', null, $param);
+        $this->log('CDN域名 ' . $config['domain'] . ' 部署证书成功！');
+    }
+
+    private function deploy_elb($fullchain, $privatekey, $config)
+    {
+        if (empty($config['project_id'])) throw new Exception('项目ID不能为空');
+        if (empty($config['region_id'])) throw new Exception('区域ID不能为空');
+        if (empty($config['cert_id'])) throw new Exception('证书ID不能为空');
+        $endpoint = 'elb.' . $config['region_id'] . '.myhuaweicloud.com';
+        $client = new HuaweiCloud($this->AccessKeyId, $this->SecretAccessKey, $endpoint, $this->proxy);
+        try {
+            $data = $client->request('GET', '/v3/' . $config['project_id'] . '/elb/certificates/' . $config['cert_id']);
+        } catch (Exception $e) {
+            throw new Exception('证书详情查询失败：' . $e->getMessage());
+        }
+        if (isset($data['certificate']['certificate']) && trim($data['certificate']['certificate']) == trim($fullchain)) {
+            $this->log('ELB证书ID ' . $config['cert_id'] . ' 已存在，无需重复部署');
+            return;
+        }
+        $param = [
+            'certificate' => [
+                'certificate' => $fullchain,
+                'private_key' => $privatekey,
+                'domain' => implode(',', $config['domainList']),
+            ],
+        ];
+        $client->request('PUT', '/v3/' . $config['project_id'] . '/elb/certificates/' . $config['cert_id'], null, $param);
+        $this->log('ELB证书ID ' . $config['cert_id'] . ' 更新证书成功！');
+    }
+
+    private function deploy_waf($fullchain, $privatekey, $config)
+    {
+        if (empty($config['project_id'])) throw new Exception('项目ID不能为空');
+        if (empty($config['region_id'])) throw new Exception('区域ID不能为空');
+        if (empty($config['cert_id'])) throw new Exception('证书ID不能为空');
+        $endpoint = 'waf.' . $config['region_id'] . '.myhuaweicloud.com';
+        $client = new HuaweiCloud($this->AccessKeyId, $this->SecretAccessKey, $endpoint, $this->proxy);
+        try {
+            $data = $client->request('GET', '/v1/' . $config['project_id'] . '/waf/certificates/' . $config['cert_id']);
+        } catch (Exception $e) {
+            throw new Exception('证书详情查询失败：' . $e->getMessage());
+        }
+        if (isset($data['content']) && trim($data['content']) == trim($fullchain)) {
+            $this->log('WAF证书ID ' . $config['cert_id'] . ' 已存在，无需重复部署');
+            return;
+        }
+        $param = [
+            'name' => $config['cert_name'],
+            'content' => $fullchain,
+            'key' => $privatekey,
+        ];
+        $client->request('PUT', '/v1/' . $config['project_id'] . '/waf/certificates/' . $config['cert_id'], null, $param);
+        $this->log('WAF证书ID ' . $config['cert_id'] . ' 更新证书成功！');
+    }
+
+    private function get_cert_id($fullchain, $privatekey)
+    {
+        $certInfo = openssl_x509_parse($fullchain, true);
+        if (!$certInfo) throw new Exception('证书解析失败');
+        $cert_name = str_replace('*.', '', $certInfo['subject']['CN']) . '-' . $certInfo['validFrom_time_t'];
+
+        $client = new HuaweiCloud($this->AccessKeyId, $this->SecretAccessKey, 'scm.cn-north-4.myhuaweicloud.com', $this->proxy);
+        $param = [
+            'name' => $cert_name,
+            'certificate' => $fullchain,
+            'private_key' => $privatekey,
+        ];
+        try {
+            $data = $client->request('POST', '/v3/scm/certificates/import', null, $param);
+        } catch (Exception $e) {
+            throw new Exception('上传证书失败：' . $e->getMessage());
+        }
+        $this->log('上传证书成功 certificate_id=' . $data['certificate_id']);
+        return $data['certificate_id'];
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+}

app/lib/deploy/huoshan.php

@@ -0,0 +1,211 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use app\lib\client\Volcengine;
+use Exception;
+
+class huoshan implements DeployInterface
+{
+    private $logger;
+    private $AccessKeyId;
+    private $SecretAccessKey;
+    private $proxy;
+
+    public function __construct($config)
+    {
+        $this->AccessKeyId = $config['AccessKeyId'];
+        $this->SecretAccessKey = $config['SecretAccessKey'];
+        $this->proxy = isset($config['proxy']) ? $config['proxy'] == 1 : false;
+    }
+
+    public function check()
+    {
+        if (empty($this->AccessKeyId) || empty($this->SecretAccessKey)) throw new Exception('必填参数不能为空');
+        $client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'open.volcengineapi.com', 'cdn', '2021-03-01', 'cn-north-1', $this->proxy);
+        $client->request('POST', 'ListCertInfo', ['Source' => 'volc_cert_center']);
+        return true;
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        if ($config['product'] == 'live') {
+            $this->deploy_live($fullchain, $privatekey, $config);
+        } else {
+            $cert_id = $this->get_cert_id($fullchain, $privatekey);
+            if (!$cert_id) throw new Exception('获取证书ID失败');
+            $info['cert_id'] = $cert_id;
+            if (!isset($config['product']) || $config['product'] == 'cdn') {
+                $this->deploy_cdn($cert_id, $config);
+            } elseif ($config['product'] == 'dcdn') {
+                $this->deploy_dcdn($cert_id, $config);
+            } elseif ($config['product'] == 'tos') {
+                $this->deploy_tos($cert_id, $config);
+            } elseif ($config['product'] == 'imagex') {
+                $this->deploy_imagex($cert_id, $config);
+            } elseif ($config['product'] == 'clb') {
+                $this->deploy_clb($cert_id, $config);
+            }
+        }
+    }
+
+    private function deploy_cdn($cert_id, $config)
+    {
+        if (empty($config['domain'])) throw new Exception('绑定的域名不能为空');
+        $client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'cdn.volcengineapi.com', 'cdn', '2021-03-01', 'cn-north-1', $this->proxy);
+        $param = [
+            'CertId' => $cert_id,
+            'Domain' => $config['domain'],
+        ];
+        $data = $client->request('POST', 'BatchDeployCert', $param);
+        if (empty($data['DeployResult'])) throw new Exception('部署证书失败：DeployResult为空');
+        foreach ($data['DeployResult'] as $row) {
+            if ($row['Status'] == 'success') {
+                $this->log('CDN域名 ' . $row['Domain'] . ' 部署证书成功！');
+            } else {
+                $this->log('CDN域名 ' . $row['Domain'] . ' 部署证书失败：' . (isset($row['ErrorMsg']) ? $row['ErrorMsg'] : ''));
+            }
+        }
+    }
+
+    private function deploy_dcdn($cert_id, $config)
+    {
+        if (empty($config['domain'])) throw new Exception('绑定的域名不能为空');
+        $client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'open.volcengineapi.com', 'dcdn', '2021-04-01', 'cn-north-1', $this->proxy);
+        $param = [
+            'CertId' => $cert_id,
+            'DomainNames' => explode(',', $config['domain']),
+        ];
+        $client->request('POST', 'CreateCertBind', $param);
+        $this->log('DCDN域名 ' . $config['domain'] . ' 部署证书成功！');
+    }
+
+    private function deploy_tos($cert_id, $config)
+    {
+        if (empty($config['bucket_domain'])) throw new Exception('Bucket域名不能为空');
+        if (empty($config['domain'])) throw new Exception('绑定的域名不能为空');
+        $client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, $config['bucket_domain'], 'tos', '2021-04-01', 'cn-beijing', $this->proxy);
+        foreach (explode(',', $config['domain']) as $domain) {
+            $param = [
+                'CustomDomainRule' => [
+                    'Domain' => $domain,
+                    'CertId' => $cert_id,
+                ]
+            ];
+            $query = ['customdomain' => ''];
+            $client->tos_request('PUT', $param, $query);
+            $this->log('对象存储域名 ' . $config['domain'] . ' 部署证书成功！');
+        }
+    }
+
+    private function deploy_live($fullchain, $privatekey, $config)
+    {
+        if (empty($config['domain'])) throw new Exception('绑定的域名不能为空');
+
+        $certInfo = openssl_x509_parse($fullchain, true);
+        if (!$certInfo) throw new Exception('证书解析失败');
+        $cert_name = str_replace('*.', '', $certInfo['subject']['CN']) . '-' . $certInfo['validFrom_time_t'];
+
+        $client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'live.volcengineapi.com', 'live', '2023-01-01', 'cn-north-1', $this->proxy);
+        $param = [
+            'CertName' => $cert_name,
+            'Rsa' => [
+                'Pubkey' => $fullchain,
+                'Prikey' => $privatekey,
+            ],
+            'UseWay' => 'https',
+        ];
+        $result = $client->request('POST', 'CreateCert', $param);
+        $this->log('上传证书成功 ChainID=' . $result['ChainID']);
+
+        foreach (explode(',', $config['domain']) as $domain) {
+            $param = [
+                'ChainID' => $result['ChainID'],
+                'Domain' => $domain,
+                'HTTPS' => true,
+                'HTTP2' => true,
+            ];
+            $client->request('POST', 'BindCert', $param);
+            $this->log('视频直播域名 ' . $domain . ' 部署证书成功！');
+        }
+    }
+
+    private function deploy_imagex($cert_id, $config)
+    {
+        if (empty($config['bucket_domain'])) throw new Exception('Bucket域名不能为空');
+        if (empty($config['domain'])) throw new Exception('绑定的域名不能为空');
+        $client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'imagex.volcengineapi.com', 'imagex', '2018-08-01', 'cn-north-1', $this->proxy);
+        foreach (explode(',', $config['domain']) as $domain) {
+            $param = [
+                [
+                    'domain' => $domain,
+                    'cert_id' => $cert_id,
+                ]
+            ];
+            $result = $client->request('POST', 'UpdateImageBatchDomainCert', $param);
+            if (isset($result['SuccessDomains']) && count($result['SuccessDomains']) > 0) {
+                $this->log('veImageX域名 ' . $domain . ' 部署证书成功！');
+            } elseif (isset($result['FailedDomains']) && count($result['FailedDomains']) > 0) {
+                $errmsg = $result['FailedDomains'][0]['ErrMsg'];
+                $this->log('veImageX域名 ' . $domain . ' 部署证书失败：' . $errmsg);
+            } else {
+                $this->log('veImageX域名 ' . $domain . ' 部署证书失败');
+            }
+        }
+    }
+
+    private function deploy_clb($cert_id, $config)
+    {
+        if (empty($config['listener_id'])) throw new Exception('监听器ID不能为空');
+        $client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'open.volcengineapi.com', 'clb', '2020-04-01', 'cn-beijing', $this->proxy);
+        $param = [
+            'ListenerId' => $config['listener_id'],
+            'CertificateSource' => 'cert_center',
+            'CertCenterCertificateId' => $cert_id,
+        ];
+        $client->request('GET', 'ModifyListenerAttributes', $param);
+        $this->log('CLB监听器 ' . $config['listener_id'] . ' 部署证书成功！');
+    }
+
+    private function get_cert_id($fullchain, $privatekey)
+    {
+        $certInfo = openssl_x509_parse($fullchain, true);
+        if (!$certInfo) throw new Exception('证书解析失败');
+        $cert_name = str_replace('*.', '', $certInfo['subject']['CN']) . '-' . $certInfo['validFrom_time_t'];
+
+        $client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'open.volcengineapi.com', 'certificate_service', '2024-10-01', 'cn-beijing', $this->proxy);
+        $param = [
+            'Tag' => $cert_name,
+            'Repeatable' => false,
+            'CertificateInfo' => [
+                'CertificateChain' => $fullchain,
+                'PrivateKey' => $privatekey,
+            ],
+        ];
+        try {
+            $data = $client->request('POST', 'ImportCertificate', $param);
+        } catch (Exception $e) {
+            throw new Exception('上传证书失败：' . $e->getMessage());
+        }
+        if (!empty($data['InstanceId'])) {
+            $cert_id = $data['InstanceId'];
+        } else {
+            $cert_id = $data['RepeatId'];
+        }
+        $this->log('上传证书成功 CertId=' . $cert_id);
+        return $cert_id;
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+}

app/lib/deploy/kangle.php

@@ -0,0 +1,208 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use Exception;
+
+class kangle implements DeployInterface
+{
+    private $logger;
+    private $url;
+    private $auth;
+    private $username;
+    private $password;
+    private $skey;
+    private $proxy;
+    private $cookie;
+
+    public function __construct($config)
+    {
+        $this->url = rtrim($config['url'], '/');
+        $this->auth = $config['auth'];
+        $this->username = $config['username'];
+        $this->password = $config['password'];
+        $this->skey = $config['skey'];
+        $this->proxy = $config['proxy'] == 1;
+    }
+
+    public function check()
+    {
+        if (empty($this->url) || empty($this->username)) throw new Exception('必填参数不能为空');
+        $this->login();
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        $this->login();
+        $this->log('登录成功 cookie:' . $this->cookie);
+        $this->getMain();
+
+        if ($config['type'] == '1' && !empty($config['domains'])) {
+            $domains = explode("\n", $config['domains']);
+            $success = 0;
+            $errmsg = null;
+            foreach ($domains as $domain) {
+                $domain = trim($domain);
+                if (empty($domain)) continue;
+                try {
+                    $this->deployDomain($domain, $fullchain, $privatekey);
+                    $this->log("域名 {$domain} 证书部署成功");
+                    $success++;
+                } catch (Exception $e) {
+                    $errmsg = $e->getMessage();
+                    $this->log("域名 {$domain} 证书部署失败：" . $errmsg);
+                }
+            }
+            if ($success == 0) {
+                throw new Exception($errmsg ? $errmsg : '要部署的域名不存在');
+            }
+        } else {
+            $this->deployAccount($fullchain, $privatekey);
+            $this->log("账号级SSL证书部署成功");
+        }
+    }
+
+    private function deployDomain($domain, $fullchain, $privatekey)
+    {
+        $path = '/vhost/?c=ssl&a=domainSsl';
+        $post = [
+            'domain' => $domain,
+            'certificate' => $fullchain,
+            'certificate_key' => $privatekey,
+        ];
+        $response = curl_client($this->url . $path, http_build_query($post), null, $this->cookie, null, $this->proxy);
+        if (strpos($response['body'], '成功')) {
+            return true;
+        } elseif (preg_match('/alert\(\'(.*?)\'\)/i', $response['body'], $match)) {
+            throw new Exception(htmlspecialchars($match[1]));
+        } elseif (strlen($response['body']) > 3 && strlen($response['body']) < 50) {
+            throw new Exception(htmlspecialchars($response['body']));
+        } else {
+            throw new Exception('原因未知(httpCode=' . $response['code'] . ')');
+        }
+    }
+
+    private function deployAccount($fullchain, $privatekey)
+    {
+        $path = '/vhost/?c=ssl&a=ssl';
+        $post = [
+            'certificate' => $fullchain,
+            'certificate_key' => $privatekey,
+        ];
+        $response = curl_client($this->url . $path, http_build_query($post), null, $this->cookie, null, $this->proxy);
+        if (strpos($response['body'], '成功')) {
+            return true;
+        } elseif (preg_match('/alert\(\'(.*?)\'\)/i', $response['body'], $match)) {
+            throw new Exception(htmlspecialchars($match[1]));
+        } elseif (strlen($response['body']) > 3 && strlen($response['body']) < 50) {
+            throw new Exception(htmlspecialchars($response['body']));
+        } else {
+            throw new Exception('原因未知(httpCode=' . $response['code'] . ')');
+        }
+    }
+
+    private function login()
+    {
+        if ($this->auth == '1') {
+            return $this->loginBySkey();
+        } else {
+            return $this->loginByPwd();
+        }
+    }
+
+    private function loginBySkey()
+    {
+        $url = $this->url . '/vhost/index.php?c=sso&a=hello&url=' . urlencode($this->url . '/index.php?');
+        $response = curl_client($url, null, null, null, null, $this->proxy);
+        if ($response['code'] == 302 && !empty($response['redirect_url'])) {
+            $cookie = '';
+            if (preg_match_all('/Set-Cookie: (.*);/iU', $response['header'], $matchs)) {
+                foreach ($matchs[1] as $val) {
+                    $arr = explode('=', $val);
+                    if ($arr[1] == '' || $arr[1] == 'deleted') continue;
+                    $cookie .= $val . '; ';
+                }
+                $query = parse_url($response['redirect_url'], PHP_URL_QUERY);
+                parse_str($query, $params);
+                if (isset($params['r'])) {
+                    $sess_key = $params['r'];
+                    $this->loginBySkey2($cookie, $sess_key);
+                    $this->cookie = $cookie;
+                    return true;
+                } else {
+                    throw new Exception('获取SSO凭据失败，sess_key获取失败');
+                }
+            } else {
+                throw new Exception('获取SSO凭据失败，获取cookie失败');
+            }
+        } elseif (strlen($response['body']) > 3 && strlen($response['body']) < 50) {
+            throw new Exception('获取SSO凭据失败 (' . htmlspecialchars($response['body']) . ')');
+        } else {
+            throw new Exception('获取SSO凭据失败 (httpCode=' . $response['code'] . ')');
+        }
+    }
+
+    private function loginBySkey2($cookie, $sess_key)
+    {
+        $s = md5($sess_key . $this->username . $sess_key . $this->skey);
+        $url = $this->url . '/vhost/index.php?c=sso&a=login&name=' . $this->username . '&r=' . $sess_key . '&s=' . $s;
+        $response = curl_client($url, null, null, $cookie, null, $this->proxy);
+        if ($response['code'] == 302) {
+            return true;
+        } elseif (strlen($response['body']) > 3 && strlen($response['body']) < 50) {
+            throw new Exception('SSO登录失败 (' . htmlspecialchars($response['body']) . ')');
+        } else {
+            throw new Exception('SSO登录失败 (httpCode=' . $response['code'] . ')');
+        }
+    }
+
+    private function loginByPwd()
+    {
+        $referer = $this->url . '/vhost/index.php?c=session&a=loginForm';
+        $url = $this->url . '/vhost/index.php?c=session&a=login';
+        $post = [
+            'username' => $this->username,
+            'passwd' => $this->password,
+        ];
+        $response = curl_client($url, http_build_query($post), $referer, null, null, $this->proxy);
+        if ($response['code'] == 302) {
+            $cookie = '';
+            if (preg_match_all('/Set-Cookie: (.*);/iU', $response['header'], $matchs)) {
+                foreach ($matchs[1] as $val) {
+                    $arr = explode('=', $val);
+                    if ($arr[1] == '' || $arr[1] == 'deleted') continue;
+                    $cookie .= $val . '; ';
+                }
+                $this->cookie = $cookie;
+                return true;
+            } else {
+                throw new Exception('登录失败，获取cookie失败');
+            }
+        } elseif (strpos($response['body'], '验证码错误')) {
+            throw new Exception('登录失败，需输入验证码');
+        } elseif (strpos($response['body'], '密码错误')) {
+            throw new Exception('登录失败，用户名或密码错误');
+        } else {
+            throw new Exception('登录失败 (httpCode=' . $response['code'] . ')');
+        }
+    }
+
+    private function getMain()
+    {
+        $path = '/vhost/';
+        curl_client($this->url . $path, null, null, $this->cookie, null, $this->proxy);
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+}

app/lib/deploy/kangleadmin.php

@@ -0,0 +1,173 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use Exception;
+
+class kangleadmin implements DeployInterface
+{
+    private $logger;
+    private $url;
+    private $path;
+    private $username;
+    private $skey;
+    private $proxy;
+    private $cookie;
+
+    public function __construct($config)
+    {
+        $this->url = rtrim($config['url'], '/');
+        if (empty($config['path'])) $config['path'] = '/admin';
+        $this->path = rtrim($config['path'], '/');
+        $this->username = $config['username'];
+        $this->skey = $config['skey'];
+        $this->proxy = $config['proxy'] == 1;
+    }
+
+    public function check()
+    {
+        if (empty($this->url) || empty($this->username) || empty($this->skey)) throw new Exception('必填参数不能为空');
+        $this->login();
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        if (empty($config['name'])) throw new Exception('网站用户名不能为空');
+        $this->login();
+        $this->log('登录成功 cookie:' . $this->cookie);
+        $this->loginVhost($config['name']);
+
+        if ($config['type'] == '1' && !empty($config['domains'])) {
+            $domains = explode("\n", $config['domains']);
+            $success = 0;
+            $errmsg = null;
+            foreach ($domains as $domain) {
+                $domain = trim($domain);
+                if (empty($domain)) continue;
+                try {
+                    $this->deployDomain($domain, $fullchain, $privatekey);
+                    $this->log("域名 {$domain} 证书部署成功");
+                    $success++;
+                } catch (Exception $e) {
+                    $errmsg = $e->getMessage();
+                    $this->log("域名 {$domain} 证书部署失败：" . $errmsg);
+                }
+            }
+            if ($success == 0) {
+                throw new Exception($errmsg ? $errmsg : '要部署的域名不存在');
+            }
+        } else {
+            $this->deployAccount($fullchain, $privatekey);
+            $this->log("账号级SSL证书部署成功");
+        }
+    }
+
+    private function deployDomain($domain, $fullchain, $privatekey)
+    {
+        $path = '/vhost/?c=ssl&a=domainSsl';
+        $post = [
+            'domain' => $domain,
+            'certificate' => $fullchain,
+            'certificate_key' => $privatekey,
+        ];
+        $response = curl_client($this->url . $path, http_build_query($post), null, $this->cookie, null, $this->proxy);
+        if (strpos($response['body'], '成功')) {
+            return true;
+        } elseif (preg_match('/alert\(\'(.*?)\'\)/i', $response['body'], $match)) {
+            throw new Exception(htmlspecialchars($match[1]));
+        } elseif (strlen($response['body']) > 3 && strlen($response['body']) < 50) {
+            throw new Exception(htmlspecialchars($response['body']));
+        } else {
+            throw new Exception('原因未知(httpCode=' . $response['code'] . ')');
+        }
+    }
+
+    private function deployAccount($fullchain, $privatekey)
+    {
+        $path = '/vhost/?c=ssl&a=ssl';
+        $post = [
+            'certificate' => $fullchain,
+            'certificate_key' => $privatekey,
+        ];
+        $response = curl_client($this->url . $path, http_build_query($post), null, $this->cookie, null, $this->proxy);
+        if (strpos($response['body'], '成功')) {
+            return true;
+        } elseif (preg_match('/alert\(\'(.*?)\'\)/i', $response['body'], $match)) {
+            throw new Exception(htmlspecialchars($match[1]));
+        } elseif (strlen($response['body']) > 3 && strlen($response['body']) < 50) {
+            throw new Exception(htmlspecialchars($response['body']));
+        } else {
+            throw new Exception('原因未知(httpCode=' . $response['code'] . ')');
+        }
+    }
+
+    private function login()
+    {
+        $url = $this->url . $this->path . '/index.php?c=sso&a=hello&url=' . urlencode($this->url . $this->path . '/index.php?');
+        $response = curl_client($url, null, null, null, null, $this->proxy);
+        if ($response['code'] == 302 && !empty($response['redirect_url'])) {
+            $cookie = '';
+            if (preg_match_all('/Set-Cookie: (.*);/iU', $response['header'], $matchs)) {
+                foreach ($matchs[1] as $val) {
+                    $arr = explode('=', $val);
+                    if ($arr[1] == '' || $arr[1] == 'deleted') continue;
+                    $cookie .= $val . '; ';
+                }
+                $query = parse_url($response['redirect_url'], PHP_URL_QUERY);
+                parse_str($query, $params);
+                if (isset($params['r'])) {
+                    $sess_key = $params['r'];
+                    $this->login2($cookie, $sess_key);
+                    $this->cookie = $cookie;
+                    return true;
+                } else {
+                    throw new Exception('获取SSO凭据失败，sess_key获取失败');
+                }
+            } else {
+                throw new Exception('获取SSO凭据失败，获取cookie失败');
+            }
+        } elseif (strlen($response['body']) > 3 && strlen($response['body']) < 50) {
+            throw new Exception('获取SSO凭据失败 (' . htmlspecialchars($response['body']) . ')');
+        } else {
+            throw new Exception('获取SSO凭据失败 (httpCode=' . $response['code'] . ')');
+        }
+    }
+
+    private function login2($cookie, $sess_key)
+    {
+        $s = md5($sess_key . $this->username . $sess_key . $this->skey);
+        $url = $this->url . $this->path . '/index.php?c=sso&a=login&name=' . $this->username . '&r=' . $sess_key . '&s=' . $s;
+        $response = curl_client($url, null, null, $cookie, null, $this->proxy);
+        if ($response['code'] == 302) {
+            return true;
+        } elseif (strlen($response['body']) > 3 && strlen($response['body']) < 50) {
+            throw new Exception('SSO登录失败 (' . htmlspecialchars($response['body']) . ')');
+        } else {
+            throw new Exception('SSO登录失败 (httpCode=' . $response['code'] . ')');
+        }
+    }
+
+    private function loginVhost($name)
+    {
+        $url = $this->url . $this->path . '/index.php?c=vhost&a=impLogin&name=' . $name;
+        $response = curl_client($url, null, null, $this->cookie, null, $this->proxy);
+        if ($response['code'] == 302) {
+            curl_client($this->url . '/vhost/', null, null, $this->cookie, null, $this->proxy);
+        } else {
+            throw new Exception('用户面板登录失败 (httpCode=' . $response['code'] . ')');
+        }
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+}

app/lib/deploy/kuocai.php

@@ -0,0 +1,94 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use Exception;
+
+class kuocai implements DeployInterface
+{
+    private $logger;
+    private $username;
+    private $password;
+    private $proxy;
+    private $token = null;
+
+    public function __construct($config)
+    {
+        $this->username = $config['username'];
+        $this->password = $config['password'];
+        $this->proxy = $config['proxy'] == 1;
+    }
+
+    public function check()
+    {
+        if (empty($this->username) || empty($this->password)) {
+            throw new Exception('请填写控制台账号和密码');
+        }
+        $this->request('/login/loginUser', [
+            'userAccount' => $this->username,
+            'userPwd' => $this->password,
+            'remember' => 'true'
+        ]);
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        $id = $config['id'];
+        if (empty($id)) {
+            throw new Exception('域名ID不能为空');
+        }
+        $this->token = $this->request('/login/loginUser', [
+            'userAccount' => $this->username,
+            'userPwd' => $this->password,
+            'remember' => 'true'
+        ]);
+        $this->request('/CdnDomainHttps/httpsConfiguration', [
+            'doMainId' => $id,
+            'https' => [
+                'certificate_name' => uniqid('cert_'),
+                'certificate_source' => '0',
+                'certificate_value' => $fullchain,
+                'https_status' => 'on',
+                'private_key' => $privatekey,
+            ]
+        ], true);
+        $this->log("域名ID:{$id}更新成功！");
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+
+    private function request($path, $params = null, $json = false)
+    {
+        $url = 'https://kuocai.cn' . $path;
+        $body = $json ? json_encode($params) : $params;
+        $headers = [];
+        if ($json) $headers[] = 'Content-Type: application/json';
+        $response = curl_client(
+            $url,
+            $body,
+            null,
+            $this->token ? "kuocai_cdn_token={$this->token}" : null,
+            $headers,
+            $this->proxy
+        );
+        $result = json_decode($response['body'], true);
+        if (isset($result['code']) && $result['code'] == 'SUCCESS') {
+            return isset($result['data']) ? $result['data'] : null;
+        } elseif (isset($result['message'])) {
+            throw new Exception($result['message']);
+        } else {
+            throw new Exception('请求失败(httpCode=' . $response['code'] . ')');
+        }
+    }
+}

app/lib/deploy/lecdn.php

@@ -0,0 +1,106 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use Exception;
+
+class lecdn implements DeployInterface
+{
+    private $logger;
+    private $url;
+    private $email;
+    private $password;
+    private $proxy;
+    private $accessToken;
+
+    public function __construct($config)
+    {
+        $this->url = rtrim($config['url'], '/');
+        $this->email = $config['email'];
+        $this->password = $config['password'];
+        $this->proxy = $config['proxy'] == 1;
+    }
+
+    public function check()
+    {
+        if (empty($this->url) || empty($this->email) || empty($this->password)) throw new Exception('账号和密码不能为空');
+        $this->login();
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        $id = $config['id'];
+        if (empty($id)) throw new Exception('证书ID不能为空');
+
+        $this->login();
+
+        try {
+            $data = $this->request('/prod-api/certificate/' . $id);
+        } catch (Exception $e) {
+            throw new Exception('证书ID:' . $id . '获取失败：' . $e->getMessage());
+        }
+
+        $params = [
+            'id' => intval($id),
+            'name' => $data['name'],
+            'description' => $data['description'],
+            'type' => 'upload',
+            'ssl_pem' => base64_encode($fullchain),
+            'ssl_key' => base64_encode($privatekey),
+            'auto_renewal' => false,
+        ];
+        $this->request('/prod-api/certificate/' . $id, $params, 'PUT');
+        $this->log("证书ID:{$id}更新成功！");
+    }
+
+    private function login()
+    {
+        $path = '/prod-api/login';
+        $params = [
+            'email' => $this->email,
+            'password' => $this->password,
+        ];
+        $result = $this->request($path, $params);
+        if (isset($result['token'])) {
+            $this->accessToken = $result['token'];
+        } else {
+            throw new Exception('登录成功，获取access_token失败');
+        }
+    }
+
+    private function request($path, $params = null, $method = null)
+    {
+        $url = $this->url . $path;
+        $headers = [];
+        $body = null;
+        if ($this->accessToken) {
+            $headers[] = 'Authorization: Bearer ' . $this->accessToken;
+        }
+        if ($params) {
+            $headers[] = 'Content-Type: application/json;charset=UTF-8';
+            $body = json_encode($params);
+        }
+        $response = curl_client($url, $body, null, null, $headers, $this->proxy, $method);
+        $result = json_decode($response['body'], true);
+        if (isset($result['code']) && $result['code'] == 200) {
+            return isset($result['data']) ? $result['data'] : null;
+        } elseif (isset($result['message'])) {
+            throw new Exception($result['message']);
+        } else {
+            throw new Exception('返回数据解析失败');
+        }
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+}

app/lib/deploy/local.php

@@ -0,0 +1,77 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use Exception;
+
+class local implements DeployInterface
+{
+    private $logger;
+
+    public function __construct($config) {}
+
+    public function check() {}
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        if (!empty($config['cmd']) && !function_exists('exec')) {
+            throw new Exception('exec函数被禁用');
+        }
+        if ($config['format'] == 'pem') {
+            $dir = dirname($config['pem_cert_file']);
+            if (!is_dir($dir)) throw new Exception($dir . ' 目录不存在');
+            if (!is_writable($dir)) throw new Exception($dir . ' 目录不可写');
+
+            if (file_put_contents($config['pem_cert_file'], $fullchain)) {
+                $this->log('证书已保存到：' . $config['pem_cert_file']);
+            } else {
+                throw new Exception('证书保存到' . $config['pem_cert_file'] . '失败，请检查目录权限');
+            }
+            if (file_put_contents($config['pem_key_file'], $privatekey)) {
+                $this->log('私钥已保存到：' . $config['pem_key_file']);
+            } else {
+                throw new Exception('私钥保存到' . $config['pem_key_file'] . '失败，请检查目录权限');
+            }
+        } elseif ($config['format'] == 'pfx') {
+            $dir = dirname($config['pfx_file']);
+            if (!is_dir($dir)) throw new Exception($dir . ' 目录不存在');
+            if (!is_writable($dir)) throw new Exception($dir . ' 目录不可写');
+
+            $pfx = \app\lib\CertHelper::getPfx($fullchain, $privatekey, $config['pfx_pass'] ? $config['pfx_pass'] : null);
+            if (file_put_contents($config['pfx_file'], $pfx)) {
+                $this->log('PFX证书已保存到：' . $config['pfx_file']);
+            } else {
+                throw new Exception('PFX证书保存到' . $config['pfx_file'] . '失败，请检查目录权限');
+            }
+        }
+        if (!empty($config['cmd'])) {
+            $cmds = explode("\n", $config['cmd']);
+            foreach ($cmds as $cmd) {
+                $cmd = trim($cmd);
+                if (empty($cmd)) continue;
+                $this->log('执行命令：' . $cmd);
+                $output = [];
+                $ret = 0;
+                exec($cmd, $output, $ret);
+                if ($ret == 0) {
+                    $this->log('执行命令成功：' . implode("\n", $output));
+                } else {
+                    throw new Exception('执行命令失败：' . implode("\n", $output));
+                }
+            }
+        }
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+
+    public function setLogger($logger)
+    {
+        $this->logger = $logger;
+    }
+}

app/lib/deploy/mwpanel.php

@@ -0,0 +1,127 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use Exception;
+
+class mwpanel implements DeployInterface
+{
+    private $logger;
+    private $url;
+    private $appid;
+    private $appsecret;
+    private $proxy;
+
+    public function __construct($config)
+    {
+        $this->url = rtrim($config['url'], '/');
+        $this->appid = $config['appid'];
+        $this->appsecret = $config['appsecret'];
+        $this->proxy = $config['proxy'] == 1;
+    }
+
+    public function check()
+    {
+        if (empty($this->url) || empty($this->appid) || empty($this->appsecret)) throw new Exception('请填写面板地址和接口密钥');
+
+        $path = '/task/count';
+        $response = $this->request($path);
+        $result = json_decode($response, true);
+        if (isset($result['status']) && $result['status'] == true) {
+            return true;
+        } else {
+            throw new Exception(isset($result['msg']) ? $result['msg'] : '面板地址无法连接');
+        }
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        if ($config['type'] == '1') {
+            $this->deployPanel($fullchain, $privatekey);
+            $this->log("面板证书部署成功");
+            return;
+        }
+        $sites = explode("\n", $config['sites']);
+        $success = 0;
+        $errmsg = null;
+        foreach ($sites as $site) {
+            $siteName = trim($site);
+            if (empty($siteName)) continue;
+            try {
+                $this->deploySite($siteName, $fullchain, $privatekey);
+                $this->log("网站 {$siteName} 证书部署成功");
+                $success++;
+            } catch (Exception $e) {
+                $errmsg = $e->getMessage();
+                $this->log("网站 {$siteName} 证书部署失败：" . $errmsg);
+            }
+        }
+        if ($success == 0) {
+            throw new Exception($errmsg ? $errmsg : '要部署的网站不存在');
+        }
+    }
+
+    private function deployPanel($fullchain, $privatekey)
+    {
+        $path = '/setting/save_panel_ssl';
+        $data = [
+            'privateKey' => $privatekey,
+            'certPem' => $fullchain,
+            'choose' => 'local',
+        ];
+        $response = $this->request($path, $data);
+        $result = json_decode($response, true);
+        if (isset($result['status']) && $result['status']) {
+            return true;
+        } elseif (isset($result['msg'])) {
+            throw new Exception($result['msg']);
+        } else {
+            throw new Exception($response ? $response : '返回数据解析失败');
+        }
+    }
+
+    private function deploySite($siteName, $fullchain, $privatekey)
+    {
+        $path = '/site/set_ssl';
+        $data = [
+            'type' => '1',
+            'siteName' => $siteName,
+            'key' => $privatekey,
+            'csr' => $fullchain,
+        ];
+        $response = $this->request($path, $data);
+        $result = json_decode($response, true);
+        if (isset($result['status']) && $result['status']) {
+            return true;
+        } elseif (isset($result['msg'])) {
+            throw new Exception($result['msg']);
+        } else {
+            throw new Exception($response ? $response : '返回数据解析失败');
+        }
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+
+    private function request($path, $params = null)
+    {
+        $url = $this->url . $path;
+
+        $headers = [
+            'app-id: '.$this->appid,
+            'app-secret: '.$this->appsecret,
+        ];
+        $response = curl_client($url, $params ? http_build_query($params) : null, null, null, $headers, $this->proxy);
+        return $response['body'];
+    }
+}

app/lib/deploy/opanel.php

@@ -0,0 +1,114 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use Exception;
+
+class opanel implements DeployInterface
+{
+    private $logger;
+    private $url;
+    private $key;
+    private $proxy;
+
+    public function __construct($config)
+    {
+        $this->url = rtrim($config['url'], '/');
+        $this->key = $config['key'];
+        $this->proxy = $config['proxy'] == 1;
+    }
+
+    public function check()
+    {
+        if (empty($this->url) || empty($this->key)) throw new Exception('请填写面板地址和接口密钥');
+        $this->request('/api/v1/settings/search');
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        $domains = $config['domainList'];
+        if (empty($domains)) throw new Exception('没有设置要部署的域名');
+
+        $params = ['page'=>1, 'pageSize'=>500];
+        try {
+            $data = $this->request('/api/v1/websites/ssl/search', $params);
+            $this->log('获取证书列表成功(total=' . $data['total'] . ')');
+        } catch (Exception $e) {
+            throw new Exception('获取证书列表失败：' . $e->getMessage());
+        }
+
+        $success = 0;
+        $errmsg = null;
+        if (!empty($data['items'])) {
+            foreach ($data['items'] as $row) {
+                if (empty($row['primaryDomain'])) continue;
+                $cert_domains = [];
+                $cert_domains[] = $row['primaryDomain'];
+                if(!empty($row['domains'])) $cert_domains += explode(',', $row['domains']);
+                $flag = false;
+                foreach ($cert_domains as $domain) {
+                    if (in_array($domain, $domains)) {
+                        $flag = true;
+                        break;
+                    }
+                }
+                if ($flag) {
+                    $params = [
+                        'sslID' => $row['id'],
+                        'type' => 'paste',
+                        'certificate' => $fullchain,
+                        'privateKey' => $privatekey,
+                        'description' => '',
+                    ];
+                    try {
+                        $this->request('/api/v1/websites/ssl/upload', $params);
+                        $this->log("证书ID:{$row['id']}更新成功！");
+                        $success++;
+                    } catch (Exception $e) {
+                        $errmsg = $e->getMessage();
+                        $this->log("证书ID:{$row['id']}更新失败：" . $errmsg);
+                    }
+                }
+            }
+        }
+        if ($success == 0) {
+            throw new Exception($errmsg ? $errmsg : '没有要更新的证书');
+        }
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+
+    private function request($path, $params = null)
+    {
+        $url = $this->url . $path;
+
+        $timestamp = time().'';
+        $token = md5('1panel' . $this->key . $timestamp);
+        $headers = [
+            '1Panel-Token: '.$token,
+            '1Panel-Timestamp: '.$timestamp
+        ];
+        $body = $params ? json_encode($params) : '{}';
+        if($body) $headers[] = 'Content-Type: application/json';
+        $response = curl_client($url, $body, null, null, $headers, $this->proxy);
+        $result = json_decode($response['body'], true);
+        if(isset($result['code']) && $result['code'] == 200){
+            return isset($result['data']) ? $result['data'] : null;
+        }elseif(isset($result['message'])){
+            throw new Exception($result['message']);
+        }else{
+            throw new Exception('请求失败(httpCode=' . $response['code'] . ')');
+        }
+    }
+}

app/lib/deploy/proxmox.php

@@ -0,0 +1,98 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use Exception;
+
+class proxmox implements DeployInterface
+{
+    private $logger;
+    private $url;
+    private $api_user;
+    private $api_key;
+    private $proxy;
+
+    public function __construct($config)
+    {
+        $this->url = rtrim($config['url'], '/');
+        $this->api_user = $config['api_user'];
+        $this->api_key = $config['api_key'];
+        $this->proxy = $config['proxy'] == 1;
+    }
+
+    public function check()
+    {
+        if (empty($this->url) || empty($this->api_user) || empty($this->api_key)) throw new Exception('必填内容不能为空');
+
+        $path = '/api2/json/access';
+        $this->send_request($path);
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        if (empty($config['node'])) throw new Exception('节点名称不能为空');
+        $cert_hash = openssl_x509_fingerprint($fullchain, 'sha256');
+        if (!$cert_hash) throw new Exception('证书解析失败');
+
+        $path = '/api2/json/nodes/' . $config['node'] . '/certificates/info';
+        $list = $this->send_request($path);
+        foreach ($list as $item) {
+            $fingerprint = strtolower(str_replace(':', '', $item['fingerprint']));
+            if ($fingerprint == $cert_hash) {
+                $this->log('节点：' . $config['node'] . ' 证书已存在');
+                return;
+            }
+        }
+
+        $path = '/api2/json/nodes/' . $config['node'] . '/certificates/custom';
+        $params = [
+            'certificates' => $fullchain,
+            'key' => $privatekey,
+            'force' => 1,
+            'restart' => 1,
+        ];
+        $this->send_request($path, $params);
+        $this->log('节点：' . $config['node'] . ' 证书部署成功！');
+    }
+
+    private function send_request($path, $params = null)
+    {
+        $url = $this->url . $path;
+        $headers = ['Authorization: PVEAPIToken=' . $this->api_user . '=' . $this->api_key];
+        $post = $params ? http_build_query($params) : null;
+        $response = curl_client($url, $post, null, null, $headers, $this->proxy);
+        if ($response['code'] == 200) {
+            $result = json_decode($response['body'], true);
+            if (isset($result['data'])) {
+                return $result['data'];
+            } elseif (isset($result['errors'])) {
+                if (is_array($result['errors'])) {
+                    $result['errors'] = implode(';', $result['errors']);
+                }
+                throw new Exception($result['errors']);
+            } else {
+                throw new Exception('返回数据解析失败');
+            }
+        } else {
+            $header = getSubstr($response['header'], ' ', "\r\n");
+            if ($header) {
+                throw new Exception($header);
+            } else {
+                throw new Exception('请求失败(httpCode=' . $response['code'] . ')');
+            }
+        }
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+}

app/lib/deploy/qiniu.php

@@ -0,0 +1,156 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use app\lib\client\Qiniu as QiniuClient;
+use Exception;
+
+class qiniu implements DeployInterface
+{
+    private $logger;
+    private $AccessKey;
+    private $SecretKey;
+    private QiniuClient $client;
+
+    public function __construct($config)
+    {
+        $this->AccessKey = $config['AccessKey'];
+        $this->SecretKey = $config['SecretKey'];
+        $this->client = new QiniuClient($this->AccessKey, $this->SecretKey, isset($config['proxy']) ? $config['proxy'] == 1 : false);
+    }
+
+    public function check()
+    {
+        if (empty($this->AccessKey) || empty($this->SecretKey)) throw new Exception('必填参数不能为空');
+        $this->client->request('GET', '/sslcert');
+        return true;
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        $domain = $config['domain'];
+        if (empty($domain)) throw new Exception('绑定的域名不能为空');
+
+        $certInfo = openssl_x509_parse($fullchain, true);
+        if (!$certInfo) throw new Exception('证书解析失败');
+        $cert_name = str_replace('*.', '', $certInfo['subject']['CN']) . '-' . $certInfo['validFrom_time_t'];
+
+        $cert_id = $this->get_cert_id($fullchain, $privatekey, $certInfo['subject']['CN'], $cert_name);
+
+        if ($config['product'] == 'cdn') {
+            $this->deploy_cdn($domain, $cert_id);
+        } elseif ($config['product'] == 'oss') {
+            $this->deploy_oss($domain, $cert_id);
+        } elseif ($config['product'] == 'pili') {
+            $this->deploy_pili($config['pili_hub'], $domain, $cert_name);
+        } else {
+            throw new Exception('未知的产品类型');
+        }
+        $info['cert_id'] = $cert_id;
+        $info['cert_name'] = $cert_name;
+    }
+
+    private function deploy_cdn($domain, $cert_id)
+    {
+        try {
+            $data = $this->client->request('GET', '/domain/' . $domain);
+        } catch (Exception $e) {
+            throw new Exception('获取域名信息失败:' . $e->getMessage());
+        }
+        if (isset($data['https']['certId']) && $data['https']['certId'] == $cert_id) {
+            $this->log('域名 ' . $domain . ' 证书已部署，无需重复操作');
+            return;
+        }
+
+        if (empty($data['https']['certId'])) {
+            $param = [
+                'certid' => $cert_id,
+            ];
+            $this->client->request('PUT', '/domain/' . $domain . '/sslize', null, $param);
+        } else {
+            $param = [
+                'certid' => $cert_id,
+                'forceHttps' => $data['https']['forceHttps'],
+                'http2Enable' => $data['https']['http2Enable'],
+            ];
+            $this->client->request('PUT', '/domain/' . $domain . '/httpsconf', null, $param);
+        }
+        $this->log('CDN域名 ' . $domain . ' 证书部署成功！');
+    }
+
+    private function deploy_oss($domain, $cert_id)
+    {
+        $param = [
+            'certid' => $cert_id,
+            'domain' => $domain,
+        ];
+        $this->client->request('POST', '/cert/bind', null, $param);
+        $this->log('OSS域名 ' . $domain . ' 证书部署成功！');
+    }
+
+    private function deploy_pili($hub, $domain, $cert_name)
+    {
+        $param = [
+            'CertName' => $cert_name,
+        ];
+        $this->client->pili_request('POST', '/v2/hubs/'.$hub.'/domains/'.$domain.'/cert', null, $param);
+        $this->log('视频直播域名 ' . $domain . ' 证书部署成功！');
+    }
+
+    private function get_cert_id($fullchain, $privatekey, $common_name, $cert_name)
+    {
+        $cert_id = null;
+        $marker = '';
+        do {
+            $query = ['marker' => $marker, 'limit' => 100];
+            $data = $this->client->request('GET', '/sslcert', $query);
+            if (empty($data['certs'])) break;
+            $marker = $data['marker'];
+            foreach ($data['certs'] as $cert) {
+                if ($cert_name == $cert['name']) {
+                    $cert_id = $cert['certid'];
+                    $this->log('证书' . $cert_name . '已存在，证书ID:' . $cert_id);
+                } elseif ($cert['not_after'] < time()) {
+                    try {
+                        $this->client->request('DELETE', '/sslcert/' . $cert['certid']);
+                        $this->log('证书' . $cert['name'] . '已过期，删除证书成功');
+                    } catch (Exception $e) {
+                        $this->log('证书' . $cert['name'] . '已过期，删除证书失败:' . $e->getMessage());
+                    }
+                    usleep(300000);
+                }
+            }
+        } while ($marker != '');
+
+        if (!$cert_id) {
+            $param = [
+                'name' => $cert_name,
+                'common_name' => $common_name,
+                'pri' => $privatekey,
+                'ca' => $fullchain,
+            ];
+            try {
+                $data = $this->client->request('POST', '/sslcert', null, $param);
+            } catch (Exception $e) {
+                throw new Exception('上传证书失败:' . $e->getMessage());
+            }
+            $this->log('上传证书成功，证书ID:' . $data['certID']);
+            $cert_id = $data['certID'];
+            usleep(500000);
+        }
+        return $cert_id;
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+}

app/lib/deploy/safeline.php

@@ -0,0 +1,112 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use Exception;
+
+class safeline implements DeployInterface
+{
+    private $logger;
+    private $url;
+    private $token;
+    private $proxy;
+
+    public function __construct($config)
+    {
+        $this->url = rtrim($config['url'], '/');
+        $this->token = $config['token'];
+        $this->proxy = $config['proxy'] == 1;
+    }
+
+    public function check()
+    {
+        if (empty($this->url) || empty($this->token)) throw new Exception('请填写控制台地址和API Token');
+        $this->request('/api/open/system');
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        $domains = $config['domainList'];
+        if (empty($domains)) throw new Exception('没有设置要部署的域名');
+
+        try {
+            $data = $this->request('/api/open/cert');
+            $this->log('获取证书列表成功(total=' . $data['total'] . ')');
+        } catch (Exception $e) {
+            throw new Exception('获取证书列表失败：' . $e->getMessage());
+        }
+
+        $success = 0;
+        $errmsg = null;
+        foreach ($data['nodes'] as $row) {
+            if (empty($row['domains'])) continue;
+            $flag = false;
+            foreach ($row['domains'] as $domain) {
+                if (in_array($domain, $domains)) {
+                    $flag = true;
+                    break;
+                }
+            }
+            if ($flag) {
+                $params = [
+                    'id' => $row['id'],
+                    'manual' => [
+                        'crt' => $fullchain,
+                        'key' => $privatekey,
+                    ],
+                    'type' => 2,
+                ];
+                try {
+                    $this->request('/api/open/cert', $params);
+                    $this->log("证书ID:{$row['id']}更新成功！");
+                    $success++;
+                } catch (Exception $e) {
+                    $errmsg = $e->getMessage();
+                    $this->log("证书ID:{$row['id']}更新失败：" . $errmsg);
+                }
+            }
+        }
+        if ($success == 0) {
+            $params = [
+                'manual' => [
+                    'crt' => $fullchain,
+                    'key' => $privatekey,
+                ],
+                'type' => 2,
+            ];
+            $this->request('/api/open/cert', $params);
+            $this->log("证书上传成功！");
+        }
+    }
+
+    private function request($path, $params = null)
+    {
+        $url = $this->url . $path;
+        $headers = ['X-SLCE-API-TOKEN: ' . $this->token];
+        $body = null;
+        if ($params) {
+            $heders[] = 'Content-Type: application/json';
+            $body = json_encode($params);
+        }
+        $response = curl_client($url, $body, null, null, $headers, $this->proxy);
+        $result = json_decode($response['body'], true);
+        if ($response['code'] == 200 && $result) {
+            return isset($result['data']) ? $result['data'] : null;
+        } else {
+            throw new Exception(!empty($result['msg']) ? $result['msg'] : '请求失败(httpCode=' . $response['code'] . ')');
+        }
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+}

app/lib/deploy/ssh.php

@@ -0,0 +1,205 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use Exception;
+
+class ssh implements DeployInterface
+{
+    private $logger;
+    private $config;
+
+    public function __construct($config)
+    {
+        $this->config = $config;
+    }
+
+    public function check()
+    {
+        $this->connect();
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        $connection = $this->connect();
+        $sftp = ssh2_sftp($connection);
+        if ($config['format'] == 'pem') {
+            $stream = fopen("ssh2.sftp://$sftp{$config['pem_cert_file']}", 'w');
+            if (!$stream) {
+                throw new Exception("无法创建证书文件：{$config['pem_cert_file']}");
+            }
+            fwrite($stream, $fullchain);
+            fclose($stream);
+            $this->log('证书已保存到：' . $config['pem_cert_file']);
+
+            $stream = fopen("ssh2.sftp://$sftp{$config['pem_key_file']}", 'w');
+            if (!$stream) {
+                throw new Exception("无法创建私钥文件：{$config['pem_key_file']}");
+            }
+            fwrite($stream, $privatekey);
+            fclose($stream);
+            $this->log('私钥已保存到：' . $config['pem_key_file']);
+        } elseif ($config['format'] == 'pfx') {
+            $pfx = \app\lib\CertHelper::getPfx($fullchain, $privatekey, $config['pfx_pass'] ? $config['pfx_pass'] : null);
+
+            $stream = fopen("ssh2.sftp://$sftp{$config['pfx_file']}", 'w');
+            if (!$stream) {
+                throw new Exception("无法创建PFX证书文件：{$config['pfx_file']}");
+            }
+            fwrite($stream, $pfx);
+            fclose($stream);
+            $this->log('PFX证书已保存到：' . $config['pfx_file']);
+
+            if ($config['uptype'] == '1' && !empty($config['iis_domain'])) {
+                $cert_hash = openssl_x509_fingerprint($fullchain, 'sha1');
+                $this->deploy_iis($connection, $config['iis_domain'], $config['pfx_file'], $config['pfx_pass'], $cert_hash);
+                $config['cmd'] = null;
+            }
+        }
+        if (!empty($config['cmd'])) {
+            $cmds = explode("\n", $config['cmd']);
+            foreach ($cmds as $cmd) {
+                $cmd = trim($cmd);
+                if (empty($cmd)) continue;
+                $this->exec($connection, $cmd);
+            }
+        }
+    }
+
+    private function deploy_iis($connection, $domain, $pfx_file, $pfx_pass, $cert_hash)
+    {
+        if (!strpos($domain, ':')) {
+            $domain .= ':443';
+        }
+        $ret = $this->exec($connection, 'netsh http show sslcert hostnameport=' . $domain);
+        if (preg_match('/:\s+(\w{40})/', $ret, $match)) {
+            if ($match[1] == $cert_hash) {
+                $this->log('IIS域名 ' . $domain . ' 证书已存在，无需更新');
+                return;
+            }
+        }
+        $p = '-p ""';
+        if (!empty($pfx_pass)) $p = '-p ' . $pfx_pass;
+        if (substr($pfx_file, 0, 1) == '/') $pfx_file = substr($pfx_file, 1);
+        $this->exec($connection, 'certutil ' . $p . ' -importPFX ' . $pfx_file);
+        $this->exec($connection, 'netsh http delete sslcert hostnameport=' . $domain);
+        $this->exec($connection, 'netsh http add sslcert hostnameport=' . $domain . ' certhash=' . $cert_hash . ' certstorename=MY appid=\'{' . $this->uuid() . '}\'');
+        $this->log('IIS域名 ' . $domain . ' 证书已更新');
+    }
+
+    private function uuid()
+    {
+        $guid = md5(uniqid(mt_rand(), true));
+        return substr($guid, 0, 8) . '-' . substr($guid, 8, 4) . '-4' . substr($guid, 12, 3) . '-' . substr($guid, 16, 4) . '-' . substr($guid, 20, 12);
+    }
+
+    private function exec($connection, $cmd)
+    {
+        $this->log('执行命令：' . $cmd);
+        $stream = ssh2_exec($connection, $cmd);
+        $errorStream = ssh2_fetch_stream($stream, SSH2_STREAM_STDERR);
+        if (!$stream || !$errorStream) {
+            throw new Exception('执行命令失败');
+        }
+        stream_set_blocking($stream, true);
+        stream_set_blocking($errorStream, true);
+        $output = stream_get_contents($stream);
+        $errorOutput = stream_get_contents($errorStream);
+        fclose($stream);
+        fclose($errorStream);
+        if (trim($errorOutput)) {
+            if ($this->config['windows'] == '1' && $this->containsGBKChinese($errorOutput)) {
+                $errorOutput = mb_convert_encoding($errorOutput, 'UTF-8', 'GBK');
+            }
+            throw new Exception('执行命令失败：' . trim($errorOutput));
+        } else {
+            if ($this->config['windows'] == '1' && $this->containsGBKChinese($output)) {
+                $output = mb_convert_encoding($output, 'UTF-8', 'GBK');
+            }
+            $this->log('执行命令成功：' . trim($output));
+            return $output;
+        }
+    }
+
+    private function connect()
+    {
+        if (!function_exists('ssh2_connect')) {
+            throw new Exception('ssh2扩展未安装');
+        }
+        if (empty($this->config['host']) || empty($this->config['port']) || empty($this->config['username']) || $this->config['auth'] == '0' && empty($this->config['password']) || $this->config['auth'] == '1' && empty($this->config['privatekey'])) {
+            throw new Exception('必填参数不能为空');
+        }
+        if (!filter_var($this->config['host'], FILTER_VALIDATE_IP) && !filter_var($this->config['host'], FILTER_VALIDATE_DOMAIN)) {
+            throw new Exception('主机地址不合法');
+        }
+        if (!is_numeric($this->config['port']) || $this->config['port'] < 1 || $this->config['port'] > 65535) {
+            throw new Exception('端口不合法');
+        }
+
+        $connection = ssh2_connect($this->config['host'], intval($this->config['port']));
+        if (!$connection) {
+            throw new Exception('SSH连接失败');
+        }
+        if ($this->config['auth'] == '1') {
+            $publicKey = $this->getPublicKey($this->config['privatekey']);
+            $publicKeyPath = app()->getRuntimePath() . $this->config['host'] . '.pub';
+            $privateKeyPath = app()->getRuntimePath() . $this->config['host'] . '.key';
+            $umask = umask(0066);
+            file_put_contents($privateKeyPath, $this->config['privatekey']);
+            file_put_contents($publicKeyPath, $publicKey);
+            umask($umask);
+            if (!ssh2_auth_pubkey_file($connection, $this->config['username'], $publicKeyPath, $privateKeyPath)) {
+                throw new Exception('私钥认证失败');
+            }
+        } else {
+            if (!ssh2_auth_password($connection, $this->config['username'], $this->config['password'])) {
+                throw new Exception('用户名或密码错误');
+            }
+        }
+        return $connection;
+    }
+
+    private function getPublicKey($privateKey)
+    {
+        $res = openssl_pkey_get_private($privateKey);
+        if (!$res) {
+            throw new Exception('加载私钥失败');
+        }
+        $details = openssl_pkey_get_details($res);
+        if (!$details || !isset($details['key'])) {
+            throw new Exception('从私钥导出公钥失败');
+        }
+        $buffer = pack("N", 7) . "ssh-rsa" .
+            $this->sshEncodeBuffer($details['rsa']['e']) .
+            $this->sshEncodeBuffer($details['rsa']['n']);
+        return "ssh-rsa " . base64_encode($buffer);
+    }
+
+    private function sshEncodeBuffer($buffer)
+    {
+        $len = strlen($buffer);
+        if (ord($buffer[0]) & 0x80) {
+            $len++;
+            $buffer = "\x00" . $buffer;
+        }
+        return pack("Na*", $len, $buffer);
+    }
+
+    private function containsGBKChinese($string)
+    {
+        return preg_match('/[\x81-\xFE][\x40-\xFE]/', $string) === 1;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+
+    public function setLogger($logger)
+    {
+        $this->logger = $logger;
+    }
+}

app/lib/deploy/synology.php

@@ -0,0 +1,156 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use Exception;
+
+class synology implements DeployInterface
+{
+    private $logger;
+    private $url;
+    private $username;
+    private $password;
+    private $version;
+    private $token;
+    private $proxy;
+
+    public function __construct($config)
+    {
+        $this->url = rtrim($config['url'], '/');
+        $this->username = $config['username'];
+        $this->password = $config['password'];
+        $this->version = $config['version'];
+        $this->proxy = $config['proxy'] == 1;
+    }
+
+    public function check()
+    {
+        if (empty($this->url) || empty($this->username) || empty($this->password)) throw new Exception('必填内容不能为空');
+        $this->login();
+    }
+
+    private function login()
+    {
+        $url = $this->url . '/webapi/' . ($this->version == '1' ? 'auth.cgi' : 'entry.cgi');
+        $params = [
+            'api' => 'SYNO.API.Auth',
+            'version' => 6,
+            'method' => 'login',
+            'session' => 'webui',
+            'account' => $this->username,
+            'passwd' => $this->password,
+            'format' => 'sid',
+            'enable_syno_token' => 'yes',
+        ];
+        $response = curl_client($url, http_build_query($params), null, null, null, $this->proxy);
+        $result = json_decode($response['body'], true);
+        if (isset($result['success']) && $result['success']) {
+            $this->token = $result['data'];
+        } elseif (isset($result['error'])) {
+            throw new Exception('登录失败：' . $result['error']);
+        } else {
+            throw new Exception('请求失败(httpCode=' . $response['code'] . ')');
+        }
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        $this->login();
+        $certInfo = openssl_x509_parse($fullchain, true);
+        $certInfo['validFrom_time_t'];
+        if (!$certInfo) throw new Exception('证书解析失败');
+
+        $url = $this->url . '/webapi/entry.cgi';
+        $params = [
+            'api' => 'SYNO.Core.Certificate.CRT',
+            'version' => 1,
+            'method' => 'list',
+            '_sid' => $this->token['sid'],
+            'SynoToken' => $this->token['synotoken'],
+        ];
+        $response = curl_client($url . '?' . http_build_query($params), null, null, $this->proxy);
+        $result = json_decode($response['body'], true);
+        if (isset($result['success']) && $result['success']) {
+            $this->log('获取证书列表成功');
+        } elseif (isset($result['error'])) {
+            throw new Exception('获取证书列表失败：' . json_encode($result['error']));
+        } else {
+            throw new Exception('获取证书列表失败(httpCode=' . $response['code'] . ')');
+        }
+
+        $id = null;
+        $validFrom = 0;
+        foreach ($result['data']['certificates'] as $certificate) {
+            if ($certificate['subject']['common_name'] == $certInfo['subject']['CN'] || $certificate['desc'] == $config['desc']) {
+                $id = $certificate['id'];
+                $validFrom = \DateTime::createFromFormat('M d H:i:s Y T', $certificate['valid_from'])->getTimestamp();
+                break;
+            }
+        }
+        if ($id) {
+            if ($validFrom == $certInfo['validFrom_time_t']) {
+                $this->log('证书ID:' . $id . '已存在，无需更新');
+                return;
+            }
+            $this->import($fullchain, $privatekey, $config, $id);
+        } else {
+            $this->import($fullchain, $privatekey, $config);
+        }
+    }
+
+    private function import($fullchain, $privatekey, $config, $id = null)
+    {
+        $url = $this->url . '/webapi/entry.cgi';
+        $params = [
+            'api' => 'SYNO.Core.Certificate',
+            'version' => 1,
+            'method' => 'import',
+            '_sid' => $this->token['sid'],
+            'SynoToken' => $this->token['synotoken'],
+        ];
+        $privatekey_file = tempnam(sys_get_temp_dir(), 'privatekey');
+        file_put_contents($privatekey_file, $privatekey);
+        $fullchain_file = tempnam(sys_get_temp_dir(), 'fullchain');
+        file_put_contents($fullchain_file, $fullchain);
+        $post = [
+            'key' => new \CURLFile($privatekey_file),
+            'cert' => new \CURLFile($fullchain_file),
+            'id' => $id,
+            'desc' => $config['desc'],
+        ];
+        $response = curl_client($url . '?' . http_build_query($params), $post, null, null, null, $this->proxy, null, 15);
+        unlink($privatekey_file);
+        unlink($fullchain_file);
+        $result = json_decode($response['body'], true);
+        if ($id) {
+            if (isset($result['success']) && $result['success']) {
+                $this->log('证书ID:' . $id . '更新成功！');
+            } elseif (isset($result['error'])) {
+                throw new Exception('证书ID:' . $id . '更新失败：' . json_encode($result['error']));
+            } else {
+                throw new Exception('证书ID:' . $id . '更新失败(httpCode=' . $response['code'] . ')');
+            }
+        } else {
+            if (isset($result['success']) && $result['success']) {
+                $this->log('证书上传成功！');
+            } elseif (isset($result['error'])) {
+                throw new Exception('证书上传失败：' . json_encode($result['error']));
+            } else {
+                throw new Exception('证书上传失败(httpCode=' . $response['code'] . ')');
+            }
+        }
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+}

app/lib/deploy/tencent.php

@@ -0,0 +1,260 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use app\lib\client\TencentCloud;
+use Exception;
+
+class tencent implements DeployInterface
+{
+    private $logger;
+    private $SecretId;
+    private $SecretKey;
+    private TencentCloud $client;
+    private $proxy;
+
+    public function __construct($config)
+    {
+        $this->SecretId = $config['SecretId'];
+        $this->SecretKey = $config['SecretKey'];
+        $this->proxy = isset($config['proxy']) ? $config['proxy'] == 1 : false;
+        $this->client = new TencentCloud($this->SecretId, $this->SecretKey, 'ssl.tencentcloudapi.com', 'ssl', '2019-12-05', null, $this->proxy);
+    }
+
+    public function check()
+    {
+        if (empty($this->SecretId) || empty($this->SecretKey)) throw new Exception('必填参数不能为空');
+        $this->client->request('DescribeCertificates', []);
+        return true;
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        $cert_id = $this->get_cert_id($fullchain, $privatekey);
+        if (!$cert_id) throw new Exception('证书ID获取失败');
+        if ($config['product'] == 'cos') {
+            if (empty($config['regionid'])) throw new Exception('所属地域ID不能为空');
+            if (empty($config['cos_bucket'])) throw new Exception('存储桶名称不能为空');
+            if (empty($config['domain'])) throw new Exception('绑定的域名不能为空');
+            $instance_id = $config['regionid'] . '|' . $config['cos_bucket'] . '|' . $config['domain'];
+            $this->client = new TencentCloud($this->SecretId, $this->SecretKey, 'ssl.tencentcloudapi.com', 'ssl', '2019-12-05', $config['regionid'], $this->proxy);
+        } elseif ($config['product'] == 'tke') {
+            if (empty($config['regionid'])) throw new Exception('所属地域ID不能为空');
+            if (empty($config['tke_cluster_id'])) throw new Exception('集群ID不能为空');
+            if (empty($config['tke_namespace'])) throw new Exception('命名空间不能为空');
+            if (empty($config['tke_secret'])) throw new Exception('secret名称不能为空');
+            $instance_id = $config['tke_cluster_id'] . '|' . $config['tke_namespace'] . '|' . $config['tke_secret'];
+            $this->client = new TencentCloud($this->SecretId, $this->SecretKey, 'ssl.tencentcloudapi.com', 'ssl', '2019-12-05', $config['regionid'], $this->proxy);
+        } elseif ($config['product'] == 'lighthouse') {
+            if (empty($config['regionid'])) throw new Exception('所属地域ID不能为空');
+            if (empty($config['lighthouse_id'])) throw new Exception('实例ID不能为空');
+            if (empty($config['domain'])) throw new Exception('绑定的域名不能为空');
+            $instance_id = $config['regionid'] . '|' . $config['lighthouse_id'] . '|' . $config['domain'];
+            $this->client = new TencentCloud($this->SecretId, $this->SecretKey, 'ssl.tencentcloudapi.com', 'ssl', '2019-12-05', $config['regionid'], $this->proxy);
+        } elseif ($config['product'] == 'ddos') {
+            if (empty($config['lighthouse_id'])) throw new Exception('实例ID不能为空');
+            if (empty($config['domain'])) throw new Exception('绑定的域名不能为空');
+            $instance_id = $config['lighthouse_id'] . '|' . $config['domain'] . '|443';
+        } elseif ($config['product'] == 'clb') {
+            return $this->deploy_clb($cert_id, $config);
+        } elseif ($config['product'] == 'scf') {
+            return $this->deploy_scf($cert_id, $config);
+        } else {
+            if (empty($config['domain'])) throw new Exception('绑定的域名不能为空');
+            if ($config['product'] == 'waf') {
+                $this->client = new TencentCloud($this->SecretId, $this->SecretKey, 'ssl.tencentcloudapi.com', 'ssl', '2019-12-05', $config['region'], $this->proxy);
+            } elseif (in_array($config['product'], ['tse', 'scf'])) {
+                if (empty($config['regionid'])) throw new Exception('所属地域ID不能为空');
+                $this->client = new TencentCloud($this->SecretId, $this->SecretKey, 'ssl.tencentcloudapi.com', 'ssl', '2019-12-05', $config['regionid'], $this->proxy);
+            }
+            $instance_id = $config['domain'];
+        }
+        try {
+            $record_id = $this->deploy_common($config['product'], $cert_id, $instance_id);
+            $info['cert_id'] = $cert_id;
+            $info['record_id'] = $record_id;
+        } catch (Exception $e) {
+            if (isset($info['record_id'])) {
+                if ($this->deploy_query($info['record_id'])) {
+                    $this->log(strtoupper($config['product']) . '实例 ' . $instance_id . ' 已部署证书，无需重复部署');
+                    return;
+                }
+            }
+            throw $e;
+        }
+    }
+
+    private function get_cert_id($fullchain, $privatekey)
+    {
+        $certInfo = openssl_x509_parse($fullchain, true);
+        if (!$certInfo) throw new Exception('证书解析失败');
+        $cert_name = str_replace('*.', '', $certInfo['subject']['CN']) . '-' . $certInfo['validFrom_time_t'];
+
+        $param = [
+            'CertificatePublicKey' => $fullchain,
+            'CertificatePrivateKey' => $privatekey,
+            'CertificateType' => 'SVR',
+            'Alias' => $cert_name,
+            'Repeatable' => false,
+        ];
+        try {
+            $data = $this->client->request('UploadCertificate', $param);
+        } catch (Exception $e) {
+            throw new Exception('上传证书失败：' . $e->getMessage());
+        }
+        $this->log('上传证书成功 CertificateId=' . $data['CertificateId']);
+        usleep(300000);
+        return $data['CertificateId'];
+    }
+
+    private function deploy_common($product, $cert_id, $instance_id)
+    {
+        if (in_array($product, ['cdn', 'waf', 'teo', 'ddos', 'live', 'vod']) && strpos($instance_id, ',') !== false) {
+            $instance_ids = explode(',', $instance_id);
+        } else {
+            $instance_ids = [$instance_id];
+        }
+        $param = [
+            'CertificateId' => $cert_id,
+            'InstanceIdList' => $instance_ids,
+            'ResourceType' => $product,
+        ];
+        $data = $this->client->request('DeployCertificateInstance', $param);
+        $this->log(json_encode($data));
+        $this->log(strtoupper($product) . '实例 ' . $instance_id . ' 部署证书成功！');
+        return $data['DeployRecordId'];
+    }
+
+    private function deploy_query($record_id)
+    {
+        $param = [
+            'DeployRecordId' => strval($record_id),
+        ];
+        try {
+            $data = $this->client->request('DescribeHostDeployRecordDetail', $param);
+            if (isset($data['SuccessTotalCount']) && $data['SuccessTotalCount'] >= 1 || isset($data['RunningTotalCount']) && $data['RunningTotalCount'] >= 1) {
+                return true;
+            }
+            if (isset($data['FailedTotalCount']) && $data['FailedTotalCount'] >= 1 && !empty($data['DeployRecordDetailList'])) {
+                $errmsg = $data['DeployRecordDetailList'][0]['ErrorMsg'];
+                if (strpos($errmsg, '\u')) {
+                    $errmsg = json_decode($errmsg);
+                }
+                $this->log('证书部署失败原因：' . $errmsg);
+            }
+        } catch (Exception $e) {
+            $this->log('查询证书部署记录失败：' . $e->getMessage());
+        }
+        return false;
+    }
+
+    private function deploy_clb($cert_id, $config)
+    {
+        if (empty($config['regionid'])) throw new Exception('所属地域ID不能为空');
+        if (empty($config['clb_id'])) throw new Exception('负载均衡ID不能为空');
+        $sni_switch = !empty($config['clb_domain']) ? 1 : 0;
+
+        $client = new TencentCloud($this->SecretId, $this->SecretKey, 'clb.tencentcloudapi.com', 'clb', '2018-03-17', $config['regionid'], $this->proxy);
+        $param = [
+            'LoadBalancerId' => $config['clb_id'],
+            'Protocol' => 'HTTPS',
+        ];
+        if (!empty($config['clb_listener_id'])) {
+            $param['ListenerIds'] = [$config['clb_listener_id']];
+        }
+        try {
+            $data = $client->request('DescribeListeners', $param);
+        } catch (Exception $e) {
+            throw new Exception('获取监听器列表失败：' . $e->getMessage());
+        }
+        if (!isset($data['TotalCount']) || $data['TotalCount'] == 0) throw new Exception('负载均衡:' . $config['clb_id'] . '监听器列表为空');
+        $count = 0;
+        foreach ($data['Listeners'] as $listener) {
+            if ($listener['SniSwitch'] == $sni_switch) {
+                if ($sni_switch == 1) {
+                    foreach ($listener['Rules'] as $rule) {
+                        if ($rule['Domain'] == $config['clb_domain']) {
+                            if (isset($rule['Certificate']['CertId']) && $cert_id == $rule['Certificate']['CertId']) {
+                                $this->log('负载均衡监听器 ' . $listener['ListenerId'] . ' 域名 ' . $rule['Domain'] . ' 已部署证书，无需重复部署');
+                            } else {
+                                $param = [
+                                    'LoadBalancerId' => $config['clb_id'],
+                                    'ListenerId' => $listener['ListenerId'],
+                                    'Domain' => $rule['Domain'],
+                                    'Certificate' => [
+                                        'SSLMode' => 'UNIDIRECTIONAL',
+                                        'CertId' => $cert_id,
+                                    ],
+                                ];
+                                $client->request('ModifyDomainAttributes', $param);
+                                $this->log('负载均衡监听器 ' . $listener['ListenerId'] . ' 域名 ' . $rule['Domain'] . ' 部署证书成功！');
+                            }
+                            $count++;
+                        }
+                    }
+                } else {
+                    if (isset($listener['Certificate']['CertId']) && $cert_id == $listener['Certificate']['CertId']) {
+                        $this->log('负载均衡监听器 ' . $listener['ListenerId'] . ' 已部署证书，无需重复部署');
+                    } else {
+                        $param = [
+                            'LoadBalancerId' => $config['clb_id'],
+                            'ListenerId' => $listener['ListenerId'],
+                            'Certificate' => [
+                                'SSLMode' => 'UNIDIRECTIONAL',
+                                'CertId' => $cert_id,
+                            ],
+                        ];
+                        $client->request('ModifyListener', $param);
+                        $this->log('负载均衡监听器 ' . $listener['ListenerId'] . ' 部署证书成功！');
+                    }
+                    $count++;
+                }
+            }
+        }
+        if ($count == 0) throw new Exception('没有找到要更新证书的监听器');
+    }
+
+    private function deploy_scf($cert_id, $config)
+    {
+        if (empty($config['regionid'])) throw new Exception('所属地域ID不能为空');
+        if (empty($config['domain'])) throw new Exception('绑定的域名不能为空');
+
+        $client = new TencentCloud($this->SecretId, $this->SecretKey, 'scf.tencentcloudapi.com', 'scf', '2018-04-16', $config['regionid'], $this->proxy);
+        $param = [
+            'Domain' => $config['domain'],
+        ];
+        try {
+            $data = $client->request('GetCustomDomain', $param);
+        } catch (Exception $e) {
+            throw new Exception('获取云函数自定义域名失败：' . $e->getMessage());
+        }
+
+        if (isset($data['CertConfig']['CertificateId']) && $data['CertConfig']['CertificateId'] == $cert_id) {
+            $this->log('云函数自定义域名 ' . $config['domain'] . ' 已部署证书，无需重复部署');
+            return;
+        }
+        $data['CertConfig']['CertificateId'] = $cert_id;
+        if ($data['Protocol'] == 'HTTP') $data['Protocol'] = 'HTTP&HTTPS';
+
+        $param = [
+            'Domain' => $config['domain'],
+            'Protocol' => $data['Protocol'],
+            'CertConfig' => $data['CertConfig'],
+        ];
+        $data = $client->request('UpdateCustomDomain', $param);
+        $this->log('云函数自定义域名 ' . $config['domain'] . ' 部署证书成功！');
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+}

app/lib/deploy/ucloud.php

@@ -0,0 +1,132 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use app\lib\client\Ucloud as UcloudClient;
+use Exception;
+
+class ucloud implements DeployInterface
+{
+    private $logger;
+    private $PublicKey;
+    private $PrivateKey;
+    private UcloudClient $client;
+
+    public function __construct($config)
+    {
+        $this->PublicKey = $config['PublicKey'];
+        $this->PrivateKey = $config['PrivateKey'];
+        $this->client = new UcloudClient($this->PublicKey, $this->PrivateKey);
+    }
+
+    public function check()
+    {
+        if (empty($this->PublicKey) || empty($this->PrivateKey)) throw new Exception('必填参数不能为空');
+        $param = ['Mode' => 'free'];
+        $this->client->request('GetCertificateList', $param);
+        return true;
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        $domain_id = $config['domain_id'];
+        if (empty($domain_id)) throw new Exception('云分发资源ID不能为空');
+
+        $certInfo = openssl_x509_parse($fullchain, true);
+        if (!$certInfo) throw new Exception('证书解析失败');
+        $cert_name = str_replace(['*', '.'], '', $certInfo['subject']['CN']) . '-' . $certInfo['validFrom_time_t'];
+
+        try {
+            $data = $this->client->request('GetCertificateV2', []);
+        } catch (Exception $e) {
+            throw new Exception('获取证书列表失败 ' . $e->getMessage());
+        }
+
+        $exist = false;
+        foreach ($data['CertList'] as $cert) {
+            if (trim($cert['UserCert']) == trim($fullchain)) {
+                $cert_name = $cert['CertName'];
+                $exist = true;
+            }
+        }
+
+        if (!$exist) {
+            $param = [
+                'CertName' => $cert_name,
+                'UserCert' => $fullchain,
+                'PrivateKey' => $privatekey,
+            ];
+            try {
+                $data = $this->client->request('AddCertificate', $param);
+            } catch (Exception $e) {
+                throw new Exception('添加证书失败 ' . $e->getMessage());
+            }
+            $this->log('添加证书成功，名称:' . $cert_name);
+        } else {
+            $this->log('获取到已添加的证书，名称:' . $cert_name);
+        }
+
+        try {
+            $data = $this->client->request('GetUcdnDomainConfig', ['DomainId.0' => $domain_id]);
+        } catch (Exception $e) {
+            throw new Exception('获取加速域名配置失败 ' . $e->getMessage());
+        }
+        if (empty($data['DomainList'])) throw new Exception('云分发资源ID:' . $domain_id . '不存在');
+        $domain = $data['DomainList'][0]['Domain'];
+        $HttpsStatusCn = $data['DomainList'][0]['HttpsStatusCn'];
+        $HttpsStatusAbroad = $data['DomainList'][0]['HttpsStatusAbroad'];
+
+        if ($data['DomainList'][0]['CertNameCn'] == $cert_name || $data['DomainList'][0]['CertNameAbroad'] == $cert_name) {
+            $this->log('云分发' . $domain_id . '证书已配置，无需重复操作');
+            return;
+        }
+
+        try {
+            $data = $this->client->request('GetCertificateBaseInfoList', ['Domain' => $domain]);
+        } catch (Exception $e) {
+            throw new Exception('获取可用证书列表失败 ' . $e->getMessage());
+        }
+        if (empty($data['CertList'])) throw new Exception('可用证书列表为空');
+
+        $cert_id = null;
+        foreach ($data['CertList'] as $cert) {
+            if ($cert['CertName'] == $cert_name) {
+                $cert_id = $cert['CertId'];
+                break;
+            }
+        }
+        if (!$cert_id) throw new Exception('证书ID不存在');
+        $this->log('证书ID获取成功:' . $cert_id);
+
+        $param = [
+            'DomainId' => $domain_id,
+            'CertName' => $cert_name,
+            'CertId' => $cert_id,
+            'CertType' => 'ucdn',
+        ];
+        if ($HttpsStatusCn == 'enable') $param['HttpsStatusCn'] = $HttpsStatusCn;
+        if ($HttpsStatusAbroad == 'enable') $param['HttpsStatusAbroad'] = $HttpsStatusAbroad;
+        if ($HttpsStatusCn != 'enable' && $HttpsStatusAbroad != 'enable') $param['HttpsStatusCn'] = 'enable';
+        try {
+            $data = $this->client->request('UpdateUcdnDomainHttpsConfigV2', $param);
+        } catch (Exception $e) {
+            throw new Exception('https加速配置失败 ' . $e->getMessage());
+        }
+        $this->log('云分发' . $domain_id . '证书配置成功！');
+        $info['cert_id'] = $cert_id;
+        $info['cert_name'] = $cert_name;
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+}

app/lib/deploy/west.php

@@ -0,0 +1,131 @@
+<?php
+
+namespace app\lib\deploy;
+
+use app\lib\DeployInterface;
+use Exception;
+
+class west implements DeployInterface
+{
+    private $logger;
+    private $username;
+    private $api_password;
+    private $baseUrl = 'https://api.west.cn/api/v2';
+    private $proxy;
+
+    public function __construct($config)
+    {
+        $this->username = $config['username'];
+        $this->api_password = $config['api_password'];
+        $this->proxy = $config['proxy'] == 1;
+    }
+
+    public function check()
+    {
+        if (empty($this->username) || empty($this->api_password)) throw new Exception('用户名或API密码不能为空');
+        $this->execute('/vhost/', ['act' => 'products']);
+    }
+
+    public function deploy($fullchain, $privatekey, $config, &$info)
+    {
+        if (empty($config['sitename'])) throw new Exception('FTP账号不能为空');
+        $params = [
+            'act' => 'vhostssl',
+            'sitename' => $config['sitename'],
+            'cmd' => 'info'
+        ];
+        try {
+            $data = $this->execute('/vhost/', $params);
+        } catch (Exception $e) {
+            throw new Exception('获取虚拟主机SSL配置失败:' . $e->getMessage());
+        }
+
+        $params = [
+            'act' => 'vhostssl',
+            'sitename' => $config['sitename'],
+            'cmd' => 'import',
+            'keycontent' => $privatekey,
+            'certcontent' => $fullchain,
+        ];
+        try {
+            $this->execute('/vhost/', $params);
+        } catch (Exception $e) {
+            throw new Exception('上传SSL证书失败:' . $e->getMessage());
+        }
+        $this->log('SSL证书上传成功');
+
+        if (!isset($data['SSLEnabled']) || $data['SSLEnabled'] == 0) {
+            $params = [
+                'act' => 'vhostssl',
+                'sitename' => $config['sitename'],
+                'cmd' => 'openssl',
+            ];
+            try {
+                $this->execute('/vhost/', $params);
+            } catch (Exception $e) {
+                throw new Exception('虚拟主机部署SSL失败:' . $e->getMessage());
+            }
+        } else {
+            $params = [
+                'act' => 'vhostssl',
+                'sitename' => $config['sitename'],
+                'cmd' => 'info'
+            ];
+            try {
+                $data = $this->execute('/vhost/', $params);
+            } catch (Exception $e) {
+                throw new Exception('获取虚拟主机SSL配置失败:' . $e->getMessage());
+            }
+            if (!empty($data['sslcert']['ssl'])) {
+                foreach ($data['sslcert']['ssl'] as $domain => $row) {
+                    if (!in_array($domain, $config['domainList'])) continue;
+                    $params = [
+                        'act' => 'vhostssl',
+                        'sitename' => $config['sitename'],
+                        'cmd' => 'clearsslcache',
+                        'sslid' => $row['sysid'],
+                        'dm' => $domain,
+                    ];
+                    try {
+                        $this->execute('/vhost/', $params);
+                        $this->log('更新' . $domain . '证书缓存成功');
+                    } catch (Exception $e) {
+                        $this->log('更新' . $domain . '证书缓存失败:' . $e->getMessage());
+                    }
+                }
+            }
+        }
+        $this->log('虚拟主机' . $config['sitename'] . '部署SSL成功');
+    }
+
+    private function execute($path, $params)
+    {
+        $params['username'] = $this->username;
+        $params['time'] = getMillisecond();
+        $params['token'] = md5($this->username . $this->api_password . $params['time']);
+        $response = curl_client($this->baseUrl . $path, str_replace('+', '%20', http_build_query($params)), null, null, null, $this->proxy);
+        $response = mb_convert_encoding($response['body'], 'UTF-8', 'GBK');
+        $arr = json_decode($response, true);
+        if ($arr) {
+            if ($arr['result'] == 200) {
+                return isset($arr['data']) ? $arr['data'] : [];
+            } else {
+                throw new Exception($arr['msg']);
+            }
+        } else {
+            throw new Exception('请求失败(httpCode=' . $response['code'] . ')');
+        }
+    }
+
+    public function setLogger($func)
+    {
+        $this->logger = $func;
+    }
+
+    private function log($txt)
+    {
+        if ($this->logger) {
+            call_user_func($this->logger, $txt);
+        }
+    }
+}

app/lib/dns/aliyun.php

@@ -1,314 +1,287 @@
 <?php
+
 namespace app\lib\dns;
 
 use app\lib\DnsInterface;
+use app\lib\client\Aliyun as AliyunClient;
+use Exception;
 
-class aliyun implements DnsInterface {
-	private $AccessKeyId;
-	private $AccessKeySecret;
-	private $Endpoint = 'alidns.aliyuncs.com'; //API接入域名
-	private $Version = '2015-01-09'; //API版本号
-	private $error;
-	private $domain;
-	private $domainid;
-	private $domainInfo;
+class aliyun implements DnsInterface
+{
+    private $AccessKeyId;
+    private $AccessKeySecret;
+    private $Endpoint = 'alidns.aliyuncs.com'; //API接入域名
+    private $Version = '2015-01-09'; //API版本号
+    private $error;
+    private $domain;
+    private $domainid;
+    private $domainInfo;
+    private AliyunClient $client;
 
-	function __construct($config){
-		$this->AccessKeyId = $config['ak'];
-		$this->AccessKeySecret = $config['sk'];
-		$this->domain = $config['domain'];
-	}
+    public function __construct($config)
+    {
+        $this->AccessKeyId = $config['ak'];
+        $this->AccessKeySecret = $config['sk'];
+        $proxy = isset($config['proxy']) ? $config['proxy'] == 1 : false;
+        $this->client = new AliyunClient($this->AccessKeyId, $this->AccessKeySecret, $this->Endpoint, $this->Version, $proxy);
+        $this->domain = $config['domain'];
+    }
 
-	public function getError(){
-		return $this->error;
-	}
+    public function getError()
+    {
+        return $this->error;
+    }
 
-	public function check(){
-		if($this->getDomainList() != false){
-			return true;
-		}
-		return false;
-	}
+    public function check()
+    {
+        if ($this->getDomainList() != false) {
+            return true;
+        }
+        return false;
+    }
 
-	//获取域名列表
-	public function getDomainList($KeyWord=null, $PageNumber=1, $PageSize=20){
-		$param = ['Action' => 'DescribeDomains', 'KeyWord' => $KeyWord, 'PageNumber' => $PageNumber, 'PageSize' => $PageSize];
-		$data = $this->request($param, true);
-		if($data){
-			$list = [];
-			foreach($data['Domains']['Domain'] as $row){
-				$list[] = [
-					'DomainId' => $row['DomainId'],
-					'Domain' => $row['DomainName'],
-					'RecordCount' => $row['RecordCount'],
-				];
-			}
-			return ['total' => $data['TotalCount'], 'list' => $list];
-		}
-		return false;
-	}
+    //获取域名列表
+    public function getDomainList($KeyWord = null, $PageNumber = 1, $PageSize = 20)
+    {
+        $param = ['Action' => 'DescribeDomains', 'KeyWord' => $KeyWord, 'PageNumber' => $PageNumber, 'PageSize' => $PageSize];
+        $data = $this->request($param, true);
+        if ($data) {
+            $list = [];
+            foreach ($data['Domains']['Domain'] as $row) {
+                $list[] = [
+                    'DomainId' => $row['DomainId'],
+                    'Domain' => $row['DomainName'],
+                    'RecordCount' => $row['RecordCount'],
+                ];
+            }
+            return ['total' => $data['TotalCount'], 'list' => $list];
+        }
+        return false;
+    }
 
-	//获取解析记录列表
-	public function getDomainRecords($PageNumber=1, $PageSize=20, $KeyWord = null, $SubDomain = null, $Type = null, $Line = null, $Status = null){
-		$param = ['Action' => 'DescribeDomainRecords', 'DomainName' => $this->domain, 'PageNumber' => $PageNumber, 'PageSize' => $PageSize];
-		if(!empty($SubDomain) || !empty($Type) || !empty($Line)){
-			$param += ['SearchMode' => 'ADVANCED', 'RRKeyWord' => $SubDomain, 'ValueKeyWord' => $KeyWord, 'Type' => $Type, 'Line' => $Line, 'ValueKeyWord' => $KeyWord];
-		}elseif(!empty($KeyWord)){
-			$param += ['KeyWord' => $KeyWord];
-		}
-		if(!isNullOrEmpty($Status)){
-			$Status = $Status == '1' ? 'Enable' : 'Disable';
-			$param += ['Status' => $Status];
-		}
-		$data = $this->request($param, true);
-		if($data){
-			$list = [];
-			foreach($data['DomainRecords']['Record'] as $row){
-				$list[] = [
-					'RecordId' => $row['RecordId'],
-					'Domain' => $row['DomainName'],
-					'Name' => $row['RR'],
-					'Type' => $row['Type'],
-					'Value' => $row['Value'],
-					'Line' => $row['Line'],
-					'TTL' => $row['TTL'],
-					'MX' => isset($row['Priority']) ? $row['Priority'] : null,
-					'Status' => $row['Status'] == 'ENABLE' ? '1' : '0',
-					'Weight' => isset($row['Weight']) ? $row['Weight'] : null,
-					'Remark' => isset($row['Remark']) ? $row['Remark'] : null,
-					'UpdateTime' => isset($row['UpdateTimestamp']) ? date('Y-m-d H:i:s', $row['UpdateTimestamp']/1000) : null,
-				];
-			}
-			return ['total' => $data['TotalCount'], 'list' => $list];
-		}
-		return false;
-	}
+    //获取解析记录列表
+    public function getDomainRecords($PageNumber = 1, $PageSize = 20, $KeyWord = null, $SubDomain = null, $Value = null, $Type = null, $Line = null, $Status = null)
+    {
+        $param = ['Action' => 'DescribeDomainRecords', 'DomainName' => $this->domain, 'PageNumber' => $PageNumber, 'PageSize' => $PageSize];
+        if (!empty($SubDomain) || !empty($Type) || !empty($Line) || !empty($Value)) {
+            $param += ['SearchMode' => 'ADVANCED', 'RRKeyWord' => $SubDomain, 'ValueKeyWord' => $Value, 'Type' => $Type, 'Line' => $Line];
+        } elseif (!empty($KeyWord)) {
+            $param += ['KeyWord' => $KeyWord];
+        }
+        if (!isNullOrEmpty($Status)) {
+            $Status = $Status == '1' ? 'Enable' : 'Disable';
+            $param += ['Status' => $Status];
+        }
+        $data = $this->request($param, true);
+        if ($data) {
+            $list = [];
+            foreach ($data['DomainRecords']['Record'] as $row) {
+                $list[] = [
+                    'RecordId' => $row['RecordId'],
+                    'Domain' => $row['DomainName'],
+                    'Name' => $row['RR'],
+                    'Type' => $row['Type'],
+                    'Value' => $row['Value'],
+                    'Line' => $row['Line'],
+                    'TTL' => $row['TTL'],
+                    'MX' => isset($row['Priority']) ? $row['Priority'] : null,
+                    'Status' => $row['Status'] == 'ENABLE' ? '1' : '0',
+                    'Weight' => isset($row['Weight']) ? $row['Weight'] : null,
+                    'Remark' => isset($row['Remark']) ? $row['Remark'] : null,
+                    'UpdateTime' => isset($row['UpdateTimestamp']) ? date('Y-m-d H:i:s', intval($row['UpdateTimestamp'] / 1000)) : null,
+                ];
+            }
+            return ['total' => $data['TotalCount'], 'list' => $list];
+        }
+        return false;
+    }
 
-	//获取子域名解析记录列表
-	public function getSubDomainRecords($SubDomain, $PageNumber=1, $PageSize=20, $Type = null, $Line = null){
-		$param = ['Action' => 'DescribeSubDomainRecords', 'SubDomain' => $SubDomain . '.' . $this->domain, 'PageNumber' => $PageNumber, 'PageSize' => $PageSize, 'Type' => $Type, 'Line' => $Line];
-		$data = $this->request($param, true);
-		if($data){
-			$list = [];
-			foreach($data['DomainRecords']['Record'] as $row){
-				$list[] = [
-					'RecordId' => $row['RecordId'],
-					'Domain' => $row['DomainName'],
-					'Name' => $row['RR'],
-					'Type' => $row['Type'],
-					'Value' => $row['Value'],
-					'Line' => $row['Line'],
-					'TTL' => $row['TTL'],
-					'MX' => isset($row['Priority']) ? $row['Priority'] : null,
-					'Status' => $row['Status'] == 'ENABLE' ? '1' : '0',
-					'Weight' => isset($row['Weight']) ? $row['Weight'] : null,
-					'Remark' => isset($row['Remark']) ? $row['Remark'] : null,
-					'UpdateTime' => isset($row['UpdateTimestamp']) ? date('Y-m-d H:i:s', $row['UpdateTimestamp']/1000) : null,
-				];
-			}
-			return ['total' => $data['TotalCount'], 'list' => $list];
-		}
-		return false;
-	}
+    //获取子域名解析记录列表
+    public function getSubDomainRecords($SubDomain, $PageNumber = 1, $PageSize = 20, $Type = null, $Line = null)
+    {
+        $param = ['Action' => 'DescribeSubDomainRecords', 'SubDomain' => $SubDomain . '.' . $this->domain, 'PageNumber' => $PageNumber, 'PageSize' => $PageSize, 'Type' => $Type, 'Line' => $Line];
+        $data = $this->request($param, true);
+        if ($data) {
+            $list = [];
+            foreach ($data['DomainRecords']['Record'] as $row) {
+                $list[] = [
+                    'RecordId' => $row['RecordId'],
+                    'Domain' => $row['DomainName'],
+                    'Name' => $row['RR'],
+                    'Type' => $row['Type'],
+                    'Value' => $row['Value'],
+                    'Line' => $row['Line'],
+                    'TTL' => $row['TTL'],
+                    'MX' => isset($row['Priority']) ? $row['Priority'] : null,
+                    'Status' => $row['Status'] == 'ENABLE' ? '1' : '0',
+                    'Weight' => isset($row['Weight']) ? $row['Weight'] : null,
+                    'Remark' => isset($row['Remark']) ? $row['Remark'] : null,
+                    'UpdateTime' => isset($row['UpdateTimestamp']) ? date('Y-m-d H:i:s', intval($row['UpdateTimestamp'] / 1000)) : null,
+                ];
+            }
+            return ['total' => $data['TotalCount'], 'list' => $list];
+        }
+        return false;
+    }
 
-	//获取解析记录详细信息
-	public function getDomainRecordInfo($RecordId){
-		$param = ['Action' => 'DescribeDomainRecordInfo', 'RecordId' => $RecordId];
-		$data = $this->request($param, true);
-		if($data){
-			return [
-				'RecordId' => $data['RecordId'],
-				'Domain' => $data['DomainName'],
-				'Name' => $data['RR'],
-				'Type' => $data['Type'],
-				'Value' => $data['Value'],
-				'Line' => $data['Line'],
-				'TTL' => $data['TTL'],
-				'MX' => isset($data['Priority']) ? $data['Priority'] : null,
-				'Status' => $data['Status'] == 'ENABLE' ? '1' : '0',
-				'Weight' => isset($data['Weight']) ? $data['Weight'] : null,
-				'Remark' => isset($data['Remark']) ? $data['Remark'] : null,
-				'UpdateTime' => isset($row['UpdateTimestamp']) ? date('Y-m-d H:i:s', $data['UpdateTimestamp']/1000) : null,
-			];
-		}
-		return false;
-	}
+    //获取解析记录详细信息
+    public function getDomainRecordInfo($RecordId)
+    {
+        $param = ['Action' => 'DescribeDomainRecordInfo', 'RecordId' => $RecordId];
+        $data = $this->request($param, true);
+        if ($data) {
+            return [
+                'RecordId' => $data['RecordId'],
+                'Domain' => $data['DomainName'],
+                'Name' => $data['RR'],
+                'Type' => $data['Type'],
+                'Value' => $data['Value'],
+                'Line' => $data['Line'],
+                'TTL' => $data['TTL'],
+                'MX' => isset($data['Priority']) ? $data['Priority'] : null,
+                'Status' => $data['Status'] == 'ENABLE' ? '1' : '0',
+                'Weight' => isset($data['Weight']) ? $data['Weight'] : null,
+                'Remark' => isset($data['Remark']) ? $data['Remark'] : null,
+                'UpdateTime' => isset($row['UpdateTimestamp']) ? date('Y-m-d H:i:s', intval($data['UpdateTimestamp'] / 1000)) : null,
+            ];
+        }
+        return false;
+    }
 
-	//添加解析记录
-	public function addDomainRecord($Name, $Type, $Value, $Line = 'default', $TTL = 600, $MX = null, $Remark = null){
-		$param = ['Action' => 'AddDomainRecord', 'DomainName' => $this->domain, 'RR' => $Name, 'Type' => $Type, 'Value' => $Value, 'Line' => $this->convertLineCode($Line), 'TTL' => intval($TTL)];
-		if($MX){
-			$params['Priority'] = intval($MX);
-		}
-		$data = $this->request($param, true);
-		if($data){
-			return $data['RecordId'];
-		}
-		return false;
-	}
+    //添加解析记录
+    public function addDomainRecord($Name, $Type, $Value, $Line = 'default', $TTL = 600, $MX = null, $Weight = null, $Remark = null)
+    {
+        $param = ['Action' => 'AddDomainRecord', 'DomainName' => $this->domain, 'RR' => $Name, 'Type' => $Type, 'Value' => $Value, 'Line' => $this->convertLineCode($Line), 'TTL' => intval($TTL)];
+        if ($MX) {
+            $param['Priority'] = intval($MX);
+        }
+        $data = $this->request($param, true);
+        if ($data) {
+            return $data['RecordId'];
+        }
+        return false;
+    }
 
-	//修改解析记录
-	public function updateDomainRecord($RecordId, $Name, $Type, $Value, $Line = 'default', $TTL = 600, $MX = null, $Remark = null){
-		$param = ['Action' => 'UpdateDomainRecord', 'RecordId' => $RecordId, 'RR' => $Name, 'Type' => $Type, 'Value' => $Value, 'Line' => $this->convertLineCode($Line), 'TTL' => intval($TTL)];
-		if($MX){
-			$params['Priority'] = intval($MX);
-		}
-		return $this->request($param);
-	}
+    //修改解析记录
+    public function updateDomainRecord($RecordId, $Name, $Type, $Value, $Line = 'default', $TTL = 600, $MX = null, $Weight = null, $Remark = null)
+    {
+        $param = ['Action' => 'UpdateDomainRecord', 'RecordId' => $RecordId, 'RR' => $Name, 'Type' => $Type, 'Value' => $Value, 'Line' => $this->convertLineCode($Line), 'TTL' => intval($TTL)];
+        if ($MX) {
+            $param['Priority'] = intval($MX);
+        }
+        return $this->request($param);
+    }
 
-	//修改解析记录备注
-	public function updateDomainRecordRemark($RecordId, $Remark){
-		$param = ['Action' => 'UpdateDomainRecordRemark', 'RecordId' => $RecordId, 'Remark' => $Remark];
-		return $this->request($param);
-	}
+    //修改解析记录备注
+    public function updateDomainRecordRemark($RecordId, $Remark)
+    {
+        $param = ['Action' => 'UpdateDomainRecordRemark', 'RecordId' => $RecordId, 'Remark' => $Remark];
+        return $this->request($param);
+    }
 
-	//删除解析记录
-	public function deleteDomainRecord($RecordId){
-		$param = ['Action' => 'DeleteDomainRecord', 'RecordId' => $RecordId];
-		return $this->request($param);
-	}
+    //删除解析记录
+    public function deleteDomainRecord($RecordId)
+    {
+        $param = ['Action' => 'DeleteDomainRecord', 'RecordId' => $RecordId];
+        return $this->request($param);
+    }
 
-	//删除子域名的解析记录
-	public function deleteSubDomainRecords($SubDomain){
-		$param = ['Action' => 'DeleteSubDomainRecords', 'DomainName' => $this->domain, 'RR' => $SubDomain];
-		return $this->request($param);
-	}
+    //删除子域名的解析记录
+    public function deleteSubDomainRecords($SubDomain)
+    {
+        $param = ['Action' => 'DeleteSubDomainRecords', 'DomainName' => $this->domain, 'RR' => $SubDomain];
+        return $this->request($param);
+    }
 
-	//设置解析记录状态
-	public function setDomainRecordStatus($RecordId, $Status){
-		$Status = $Status == '1' ? 'Enable' : 'Disable';
-		$param = ['Action' => 'SetDomainRecordStatus', 'RecordId' => $RecordId, 'Status' => $Status];
-		return $this->request($param);
-	}
+    //设置解析记录状态
+    public function setDomainRecordStatus($RecordId, $Status)
+    {
+        $Status = $Status == '1' ? 'Enable' : 'Disable';
+        $param = ['Action' => 'SetDomainRecordStatus', 'RecordId' => $RecordId, 'Status' => $Status];
+        return $this->request($param);
+    }
 
-	//获取解析记录操作日志
-	public function getDomainRecordLog($PageNumber = 1, $PageSize = 20, $KeyWord = null, $StartDate = null, $endDate = null){
-		$param = ['Action' => 'DescribeRecordLogs', 'DomainName' => $this->domain, 'PageNumber' => $PageNumber, 'PageSize' => $PageSize, 'KeyWord' => $KeyWord, 'StartDate' => $StartDate, 'endDate' => $endDate, 'Lang' => 'zh'];
-		$data = $this->request($param, true);
-		if($data){
-			$list = [];
-			foreach($data['RecordLogs']['RecordLog'] as $row){
-				$list[] = ['time'=>date('Y-m-d H:i:s', intval($row['ActionTimestamp']/1000)), 'data'=>$row['Message']];
-			}
-			return ['total' => $data['TotalCount'], 'list' => $list];
-		}
-		return false;
-	}
+    //获取解析记录操作日志
+    public function getDomainRecordLog($PageNumber = 1, $PageSize = 20, $KeyWord = null, $StartDate = null, $endDate = null)
+    {
+        $param = ['Action' => 'DescribeRecordLogs', 'DomainName' => $this->domain, 'PageNumber' => $PageNumber, 'PageSize' => $PageSize, 'KeyWord' => $KeyWord, 'StartDate' => $StartDate, 'endDate' => $endDate, 'Lang' => 'zh'];
+        $data = $this->request($param, true);
+        if ($data) {
+            $list = [];
+            foreach ($data['RecordLogs']['RecordLog'] as $row) {
+                $list[] = ['time' => date('Y-m-d H:i:s', intval($row['ActionTimestamp'] / 1000)), 'data' => $row['Message']];
+            }
+            return ['total' => $data['TotalCount'], 'list' => $list];
+        }
+        return false;
+    }
 
-	//获取解析线路列表
-	public function getRecordLine(){
-		$data = $this->getDomainInfo();
-		if($data){
-			$list = [];
-			foreach($data['RecordLines']['RecordLine'] as $row){
-				$list[$row['LineCode']] = ['name'=>$row['LineDisplayName'], 'parent'=>isset($row['FatherCode']) ? $row['FatherCode'] : null];
-			}
-			return $list;
-		}
-		return false;
-	}
+    //获取解析线路列表
+    public function getRecordLine()
+    {
+        $data = $this->getDomainInfo();
+        if ($data) {
+            $list = [];
+            foreach ($data['RecordLines']['RecordLine'] as $row) {
+                $list[$row['LineCode']] = ['name' => $row['LineDisplayName'], 'parent' => isset($row['FatherCode']) ? $row['FatherCode'] : null];
+            }
+            return $list;
+        }
+        return false;
+    }
 
-	//获取域名信息
-	public function getDomainInfo(){
-		if(!empty($this->domainInfo)) return $this->domainInfo;
-		$param = ['Action' => 'DescribeDomainInfo', 'DomainName' => $this->domain, 'NeedDetailAttributes' => 'true'];
-		$data = $this->request($param, true);
-		if($data){
-			$this->domainInfo = $data;
-			return $data;
-		}
-		return false;
-	}
+    //获取域名信息
+    public function getDomainInfo()
+    {
+        if (!empty($this->domainInfo)) return $this->domainInfo;
+        $param = ['Action' => 'DescribeDomainInfo', 'DomainName' => $this->domain, 'NeedDetailAttributes' => 'true'];
+        $data = $this->request($param, true);
+        if ($data) {
+            $this->domainInfo = $data;
+            return $data;
+        }
+        return false;
+    }
 
-	//获取域名最低TTL
-	public function getMinTTL(){
-		$data = $this->getDomainInfo();
-		if($data){
-			return $data['MinTtl'];
-		}
-		return false;
-	}
+    //获取域名最低TTL
+    public function getMinTTL()
+    {
+        $data = $this->getDomainInfo();
+        if ($data) {
+            return $data['MinTtl'];
+        }
+        return false;
+    }
 
-	private function convertLineCode($line){
-		$convert_dict = ['0'=>'default', '10=1'=>'unicom', '10=0'=>'telecom', '10=3'=>'mobile', '10=2'=>'edu', '3=0'=>'oversea', '10=22'=>'btvn', '80=0'=>'search', '7=0'=>'internal'];
-		if(array_key_exists($line, $convert_dict)){
-			return $convert_dict[$line];
-		}
-		return $line;
-	}
+    private function convertLineCode($line)
+    {
+        $convert_dict = ['0' => 'default', '10=1' => 'unicom', '10=0' => 'telecom', '10=3' => 'mobile', '10=2' => 'edu', '3=0' => 'oversea', '10=22' => 'btvn', '80=0' => 'search', '7=0' => 'internal'];
+        if (array_key_exists($line, $convert_dict)) {
+            return $convert_dict[$line];
+        }
+        return $line;
+    }
 
+    private function request($param, $returnData = false)
+    {
+        if (empty($this->AccessKeyId) || empty($this->AccessKeySecret)) return false;
+        try{
+            $result = $this->client->request($param);
+        }catch(Exception $e){
+            try{
+                usleep(50000);
+                $result = $this->client->request($param);
+            }catch(Exception $e){
+                $this->setError($e->getMessage());
+                return false;
+            }
+        }
+        return $returnData ? $result : true;
+    }
 
-	private function aliyunSignature($parameters, $accessKeySecret, $method)
-	{
-		ksort($parameters);
-		$canonicalizedQueryString = '';
-		foreach ($parameters as $key => $value) {
-			if($value === null) continue;
-			$canonicalizedQueryString .= '&' . $this->percentEncode($key). '=' . $this->percentEncode($value);
-		}
-		$stringToSign = $method . '&%2F&' . $this->percentEncode(substr($canonicalizedQueryString, 1));
-		$signature = base64_encode(hash_hmac("sha1", $stringToSign, $accessKeySecret."&", true));
-
-		return $signature;
-	}
-	private function percentEncode($str)
-	{
-		$search = ['+', '*', '%7E'];
-		$replace = ['%20', '%2A', '~'];
-		return str_replace($search, $replace, urlencode($str));
-	}
-	private function request($param, $returnData=false){
-		if(empty($this->AccessKeyId)||empty($this->AccessKeySecret))return false;
-		$result = $this->request_do($param, $returnData);
-		if(!$returnData && $result!==true){
-			usleep(50000);
-			$result = $this->request_do($param, $returnData);
-		}
-		return $result;
-	}
-	private function request_do($param, $returnData=false){
-		if(empty($this->AccessKeyId)||empty($this->AccessKeySecret))return false;
-		$url='https://'.$this->Endpoint.'/';
-		$data=array(
-			'Format' => 'JSON',
-			'Version' => $this->Version,
-			'AccessKeyId' => $this->AccessKeyId,
-			'SignatureMethod' => 'HMAC-SHA1',
-			'Timestamp' => gmdate('Y-m-d\TH:i:s\Z'),
-			'SignatureVersion' => '1.0',
-			'SignatureNonce' => random(8));
-		$data=array_merge($data, $param);
-		$data['Signature'] = $this->aliyunSignature($data, $this->AccessKeySecret, 'POST');
-		$ch = curl_init($url);
-		curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
-		curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
-		curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
-		curl_setopt($ch, CURLOPT_TIMEOUT, 10);
-		curl_setopt($ch, CURLOPT_POST, 1);
-		curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($data));
-		$response = curl_exec($ch);
-		$errno = curl_errno($ch);
-		$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
-		if ($errno) {
-			$this->setError('Curl error: ' . curl_error($ch));
-		}
-		curl_close($ch);
-		if ($errno) return false;
-
-		$arr = json_decode($response,true);
-		if($httpCode==200){
-			return $returnData ? $arr : true;
-		}elseif($arr){
-			$this->setError($arr['Message']);
-			return false;
-		}else{
-			$this->setError('返回数据解析失败');
-			return false;
-		}
-	}
-
-	private function setError($message){
-		$this->error = $message;
-		//file_put_contents('logs.txt',date('H:i:s').' '.$message."\r\n", FILE_APPEND);
-	}
+    private function setError($message)
+    {
+        $this->error = $message;
+        //file_put_contents('logs.txt',date('H:i:s').' '.$message."\r\n", FILE_APPEND);
+    }
 }

app/lib/dns/baidu.php

@@ -1,325 +1,218 @@
 <?php
+
 namespace app\lib\dns;
 
 use app\lib\DnsInterface;
+use app\lib\client\BaiduCloud;
+use Exception;
 
-class baidu implements DnsInterface {
-	private $AccessKeyId;
-	private $SecretAccessKey;
-	private $endpoint = "dns.baidubce.com";
-	private $error;
-	private $domain;
-	private $domainid;
+class baidu implements DnsInterface
+{
+    private $AccessKeyId;
+    private $SecretAccessKey;
+    private $endpoint = "dns.baidubce.com";
+    private $error;
+    private $domain;
+    private $domainid;
+    private BaiduCloud $client;
 
-	function __construct($config){
-		$this->AccessKeyId = $config['ak'];
-		$this->SecretAccessKey = $config['sk'];
-		$this->domain = $config['domain'];
-		$this->domainid = $config['domainid'];
-	}
-
-	public function getError(){
-		return $this->error;
-	}
-
-	public function check(){
-		if($this->getDomainList() != false){
-			return true;
-		}
-		return false;
-	}
-
-	//获取域名列表
-	public function getDomainList($KeyWord=null, $PageNumber=1, $PageSize=20){
-		$query = ['name' => $KeyWord];
-		$data = $this->send_reuqest('GET', '/v1/dns/zone', $query);
-		if($data){
-			$list = [];
-			foreach($data['zones'] as $row){
-				$list[] = [
-					'DomainId' => $row['id'],
-					'Domain' => rtrim($row['name'], '.'),
-					'RecordCount' => 0,
-				];
-			}
-			return ['total' => count($list), 'list' => $list];
-		}
-		return false;
-	}
-
-	//获取解析记录列表
-	public function getDomainRecords($PageNumber=1, $PageSize=20, $KeyWord = null, $SubDomain = null, $Type = null, $Line = null, $Status = null){
-		$marker = cookie('baidu_record_marker');
-		$query = ['rr' => $KeyWord];
-		if(!isNullOrEmpty(($SubDomain))){
-			$param['rr'] = $SubDomain;
-		}
-		$data = $this->send_reuqest('GET', '/v1/dns/zone/'.$this->domain.'/record', $query);
-		if($data){
-			$list = [];
-			foreach($data['records'] as $row){
-				$list[] = [
-					'RecordId' => $row['id'],
-					'Domain' => $this->domain,
-					'Name' => $row['rr'],
-					'Type' => $row['type'],
-					'Value' => $row['value'],
-					'Line' => $row['line'],
-					'TTL' => $row['ttl'],
-					'MX' => $row['priority'],
-					'Status' => $row['status'] == 'running' ? '1' : '0',
-					'Weight' => null,
-					'Remark' => $row['description'],
-					'UpdateTime' => null,
-				];
-			}
-			return ['total' => count($list), 'list' => $list];
-		}
-		return false;
-	}
-
-	//获取子域名解析记录列表
-	public function getSubDomainRecords($SubDomain, $PageNumber=1, $PageSize=20, $Type = null, $Line = null){
-		if($SubDomain == '')$SubDomain='@';
-		return $this->getDomainRecords($PageNumber, $PageSize, null, $SubDomain, $Type, $Line);
-	}
-
-	//获取解析记录详细信息
-	public function getDomainRecordInfo($RecordId){
-		$data = $this->send_reuqest('GET', '/v2.1/zones/'.$this->domainid.'/recordsets/'.$RecordId);
-		if($data){
-			return [
-				'RecordId' => $data['id'],
-				'Domain' => rtrim($data['zone_name'], '.'),
-				'Name' => str_replace('.'.$data['zone_name'], '', $data['name']),
-				'Type' => $data['type'],
-				'Value' => $data['records'],
-				'Line' => $data['line'],
-				'TTL' => $data['ttl'],
-				'MX' => $data['weight'],
-				'Status' => $data['status'] == 'ACTIVE' ? '1' : '0',
-				'Weight' => $data['weight'],
-				'Remark' => $data['description'],
-				'UpdateTime' => $data['updated_at'],
-			];
-		}
-		return false;
-	}
-
-	//添加解析记录
-	public function addDomainRecord($Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Remark = null){
-		$params = ['rr' => $Name, 'type' => $this->convertType($Type), 'value' => $Value, 'line'=>$Line, 'ttl' => intval($TTL), 'description' => $Remark];
-		if($Type == 'MX')$param['priority'] = intval($MX);
-		$query = ['clientToken' => getSid()];
-		return $this->send_reuqest('POST', '/v1/dns/zone/'.$this->domain.'/record', $query, $params);
-	}
-
-	//修改解析记录
-	public function updateDomainRecord($RecordId, $Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Remark = null){
-		$params = ['rr' => $Name, 'type' => $this->convertType($Type), 'value' => $Value, 'line'=>$Line, 'ttl' => intval($TTL), 'description' => $Remark];
-		if($Type == 'MX')$param['priority'] = intval($MX);
-		$query = ['clientToken' => getSid()];
-		return $this->send_reuqest('PUT', '/v1/dns/zone/'.$this->domain.'/record/'.$RecordId, $query, $params);
-	}
-
-	//修改解析记录备注
-	public function updateDomainRecordRemark($RecordId, $Remark){
-		return false;
-	}
-
-	//删除解析记录
-	public function deleteDomainRecord($RecordId){
-		$query = ['clientToken' => getSid()];
-		return $this->send_reuqest('DELETE', '/v1/dns/zone/'.$this->domain.'/record/'.$RecordId, $query);
-	}
-	
-	//设置解析记录状态
-	public function setDomainRecordStatus($RecordId, $Status){
-		$Status = $Status == '1' ? 'enable' : 'disable';
-		$query = [$Status => '', 'clientToken' => getSid()];
-		return $this->send_reuqest('PUT', '/v1/dns/zone/'.$this->domain.'/record/'.$RecordId, $query);
-	}
-
-	//获取解析记录操作日志
-	public function getDomainRecordLog($PageNumber = 1, $PageSize = 20, $KeyWord = null, $StartDate = null, $endDate = null){
-		return false;
-	}
-
-	//获取解析线路列表
-	public function getRecordLine(){
-		return [
-			'default'=>['name'=>'默认', 'parent'=>null],
-			'ct'=>['name'=>'电信', 'parent'=>null],
-			'cnc'=>['name'=>'联通', 'parent'=>null],
-			'cmnet'=>['name'=>'移动', 'parent'=>null],
-			'edu'=>['name'=>'教育网', 'parent'=>null],
-			'search'=>['name'=>'搜索引擎(百度)', 'parent'=>null],
-		];
-	}
-
-	//获取域名概览信息
-	public function getDomainInfo(){
-		$res = $this->getDomainList($this->domain);
-		if($res && !empty($res['list'])){
-			return $res['list'][0];
-		}
-		return false;
-	}
-
-	//获取域名最低TTL
-	public function getMinTTL(){
-		return false;
-	}
-
-	private function convertType($type){
-		return $type;
-	}
-
-	private function send_reuqest($method, $path, $query = null, $params = null){
-		if(!empty($query)){
-			$query = array_filter($query, function($a){ return $a!==null;});
-		}
-		if(!empty($params)){
-			$params = array_filter($params, function($a){ return $a!==null;});
-		}
-
-		$time = time();
-		$date = gmdate("Y-m-d\TH:i:s\Z", $time);
-		$body = !empty($params) ? json_encode($params) : '';
-		$headers = [
-			'Host' => $this->endpoint,
-			'x-bce-date' => $date,
-		];
-		if($body){
-			$headers['Content-Type'] = 'application/json';
-		}
-		
-		$authorization = $this->generateSign($method, $path, $query, $headers, $time);
-		$headers['Authorization'] = $authorization;
-
-		$url = 'https://'.$this->endpoint.$path;
-		if(!empty($query)){
-			$url .= '?'.http_build_query($query);
-		}
-		$header = [];
-		foreach($headers as $key => $value){
-			$header[] = $key.': '.$value;
-		}
-		return $this->curl($method, $url, $body, $header);
-	}
-
-	private function generateSign($method, $path, $query, $headers, $time){
-		$algorithm = "bce-auth-v1";
-
-		// step 1: build canonical request string
-		$httpRequestMethod = $method;
-		$canonicalUri = $this->getCanonicalUri($path);
-		$canonicalQueryString = $this->getCanonicalQueryString($query);
-		[$canonicalHeaders, $signedHeaders] = $this->getCanonicalHeaders($headers);
-		$canonicalRequest = $httpRequestMethod."\n"
-			.$canonicalUri."\n"
-			.$canonicalQueryString."\n"
-			.$canonicalHeaders;
-		
-		// step 2: calculate signing key
-		$date = gmdate("Y-m-d\TH:i:s\Z", $time);
-		$expirationInSeconds = 1800;
-		$authString = $algorithm . '/' . $this->AccessKeyId . '/' . $date . '/' . $expirationInSeconds;
-        $signingKey = hash_hmac('sha256', $authString, $this->SecretAccessKey);
-		
-		// step 3: sign string
-		$signature = hash_hmac("sha256", $canonicalRequest, $signingKey);
-
-		// step 4: build authorization
-		$authorization = $authString . '/' . $signedHeaders . "/" . $signature;
-
-		return $authorization;
-	}
-
-	private function escape($str)
+    public function __construct($config)
     {
-        $search = ['+', '*', '%7E'];
-		$replace = ['%20', '%2A', '~'];
-		return str_replace($search, $replace, urlencode($str));
+        $this->AccessKeyId = $config['ak'];
+        $this->SecretAccessKey = $config['sk'];
+        $proxy = isset($config['proxy']) ? $config['proxy'] == 1 : false;
+        $this->client = new BaiduCloud($this->AccessKeyId, $this->SecretAccessKey, $this->endpoint, $proxy);
+        $this->domain = $config['domain'];
+        $this->domainid = $config['domainid'];
     }
 
-	private function getCanonicalUri($path)
-	{
-		if(empty($path)) return '/';
-		$uri = str_replace('%2F', '/', $this->escape($path));
-		if(substr($uri, 0, 1) !== '/') $uri = '/'.$uri;
-		return $uri;
-	}
-
-	private function getCanonicalQueryString($parameters)
+    public function getError()
     {
-		if(empty($parameters)) return '';
-        ksort($parameters);
-		$canonicalQueryString = '';
-		foreach ($parameters as $key => $value) {
-			if($key == 'authorization') continue;
-			$canonicalQueryString .= '&' . $this->escape($key). '=' . $this->escape($value);
-		}
-        return substr($canonicalQueryString, 1);
+        return $this->error;
     }
 
-	private function getCanonicalHeaders($oldheaders){
-		$headers = array();
-        foreach ($oldheaders as $key => $value) {
-            $headers[strtolower($key)] = trim($value);
+    public function check()
+    {
+        if ($this->getDomainList() != false) {
+            return true;
         }
-		ksort($headers);
+        return false;
+    }
 
-		$canonicalHeaders = '';
-		$signedHeaders = '';
-		foreach ($headers as $key => $value) {
-			$canonicalHeaders .= $this->escape($key) . ':' . $this->escape($value) . "\n";
-			$signedHeaders .= $key . ';';
-		}
-		$canonicalHeaders = substr($canonicalHeaders, 0, -1);
-		$signedHeaders = substr($signedHeaders, 0, -1);
-		return [$canonicalHeaders, $signedHeaders];
-	}
+    //获取域名列表
+    public function getDomainList($KeyWord = null, $PageNumber = 1, $PageSize = 20)
+    {
+        $query = ['name' => $KeyWord];
+        $data = $this->send_reuqest('GET', '/v1/dns/zone', $query);
+        if ($data) {
+            $list = [];
+            foreach ($data['zones'] as $row) {
+                $list[] = [
+                    'DomainId' => $row['id'],
+                    'Domain' => rtrim($row['name'], '.'),
+                    'RecordCount' => 0,
+                ];
+            }
+            return ['total' => count($list), 'list' => $list];
+        }
+        return false;
+    }
 
-	private function curl($method, $url, $body, $header){
-		$ch = curl_init($url);
-		curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
-		curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
-		curl_setopt($ch, CURLOPT_HTTPHEADER, $header);
-		curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
-		curl_setopt($ch, CURLOPT_TIMEOUT, 10);
-		curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
-		if(!empty($body)){
-			curl_setopt($ch, CURLOPT_POSTFIELDS, $body);
-		}
-		$response = curl_exec($ch);
-		$errno = curl_errno($ch);
-		$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
-		if ($errno) {
-			$this->setError('Curl error: ' . curl_error($ch));
-		}
-		curl_close($ch);
-		if ($errno) return false;
+    //获取解析记录列表
+    public function getDomainRecords($PageNumber = 1, $PageSize = 20, $KeyWord = null, $SubDomain = null, $Value = null, $Type = null, $Line = null, $Status = null)
+    {
+        $query = ['rr' => $KeyWord];
+        if (!isNullOrEmpty($SubDomain)) {
+            $query['rr'] = $SubDomain;
+        }
+        $data = $this->send_reuqest('GET', '/v1/dns/zone/'.$this->domain.'/record', $query);
+        if ($data) {
+            $list = [];
+            foreach ($data['records'] as $row) {
+                $list[] = [
+                    'RecordId' => $row['id'],
+                    'Domain' => $this->domain,
+                    'Name' => $row['rr'],
+                    'Type' => $row['type'],
+                    'Value' => $row['value'],
+                    'Line' => $row['line'],
+                    'TTL' => $row['ttl'],
+                    'MX' => $row['priority'],
+                    'Status' => $row['status'] == 'running' ? '1' : '0',
+                    'Weight' => null,
+                    'Remark' => $row['description'],
+                    'UpdateTime' => null,
+                ];
+            }
+            return ['total' => count($list), 'list' => $list];
+        }
+        return false;
+    }
 
-		if(empty($response) && $httpCode == 200){
-			return true;
-		}
-		$arr=json_decode($response,true);
-		if($arr){
-			if(isset($arr['code']) && isset($arr['message'])){
-				$this->setError($arr['message']);
-				return false;
-			}else{
-				return $arr;
-			}
-		}else{
-			$this->setError('返回数据解析失败');
-			return false;
-		}
-	}
+    //获取子域名解析记录列表
+    public function getSubDomainRecords($SubDomain, $PageNumber = 1, $PageSize = 20, $Type = null, $Line = null)
+    {
+        if ($SubDomain == '') $SubDomain = '@';
+        return $this->getDomainRecords($PageNumber, $PageSize, null, $SubDomain, null, $Type, $Line);
+    }
 
-	private function setError($message){
-		$this->error = $message;
-		//file_put_contents('logs.txt',date('H:i:s').' '.$message."\r\n", FILE_APPEND);
-	}
-}
+    //获取解析记录详细信息
+    public function getDomainRecordInfo($RecordId)
+    {
+        $query = ['id' => $RecordId];
+        $data = $this->send_reuqest('GET', '/v1/dns/zone/'.$this->domain.'/record', $query);
+        if ($data && !empty($data['records'])) {
+            $data = $data['records'][0];
+            return [
+                'RecordId' => $data['id'],
+                'Domain' => rtrim($data['zone_name'], '.'),
+                'Name' => str_replace('.'.$data['zone_name'], '', $data['name']),
+                'Type' => $data['type'],
+                'Value' => $data['value'],
+                'Line' => $data['line'],
+                'TTL' => $data['ttl'],
+                'MX' => $data['priority'],
+                'Status' => $data['status'] == 'running' ? '1' : '0',
+                'Weight' => null,
+                'Remark' => $data['description'],
+                'UpdateTime' => null,
+            ];
+        }
+        return false;
+    }
+
+    //添加解析记录
+    public function addDomainRecord($Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Weight = null, $Remark = null)
+    {
+        $params = ['rr' => $Name, 'type' => $this->convertType($Type), 'value' => $Value, 'line' => $Line, 'ttl' => intval($TTL), 'description' => $Remark];
+        if ($Type == 'MX') $params['priority'] = intval($MX);
+        $query = ['clientToken' => getSid()];
+        return $this->send_reuqest('POST', '/v1/dns/zone/'.$this->domain.'/record', $query, $params);
+    }
+
+    //修改解析记录
+    public function updateDomainRecord($RecordId, $Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Weight = null, $Remark = null)
+    {
+        $params = ['rr' => $Name, 'type' => $this->convertType($Type), 'value' => $Value, 'line' => $Line, 'ttl' => intval($TTL), 'description' => $Remark];
+        if ($Type == 'MX') $params['priority'] = intval($MX);
+        $query = ['clientToken' => getSid()];
+        return $this->send_reuqest('PUT', '/v1/dns/zone/'.$this->domain.'/record/'.$RecordId, $query, $params);
+    }
+
+    //修改解析记录备注
+    public function updateDomainRecordRemark($RecordId, $Remark)
+    {
+        return false;
+    }
+
+    //删除解析记录
+    public function deleteDomainRecord($RecordId)
+    {
+        $query = ['clientToken' => getSid()];
+        return $this->send_reuqest('DELETE', '/v1/dns/zone/'.$this->domain.'/record/'.$RecordId, $query);
+    }
+
+    //设置解析记录状态
+    public function setDomainRecordStatus($RecordId, $Status)
+    {
+        $Status = $Status == '1' ? 'enable' : 'disable';
+        $query = [$Status => '', 'clientToken' => getSid()];
+        return $this->send_reuqest('PUT', '/v1/dns/zone/'.$this->domain.'/record/'.$RecordId, $query);
+    }
+
+    //获取解析记录操作日志
+    public function getDomainRecordLog($PageNumber = 1, $PageSize = 20, $KeyWord = null, $StartDate = null, $endDate = null)
+    {
+        return false;
+    }
+
+    //获取解析线路列表
+    public function getRecordLine()
+    {
+        return [
+            'default' => ['name' => '默认', 'parent' => null],
+            'ct' => ['name' => '电信', 'parent' => null],
+            'cnc' => ['name' => '联通', 'parent' => null],
+            'cmnet' => ['name' => '移动', 'parent' => null],
+            'edu' => ['name' => '教育网', 'parent' => null],
+            'search' => ['name' => '搜索引擎(百度)', 'parent' => null],
+        ];
+    }
+
+    //获取域名概览信息
+    public function getDomainInfo()
+    {
+        $res = $this->getDomainList($this->domain);
+        if ($res && !empty($res['list'])) {
+            return $res['list'][0];
+        }
+        return false;
+    }
+
+    //获取域名最低TTL
+    public function getMinTTL()
+    {
+        return false;
+    }
+
+    private function convertType($type)
+    {
+        return $type;
+    }
+
+    private function send_reuqest($method, $path, $query = null, $params = null)
+    {
+        try{
+            return $this->client->request($method, $path, $query, $params);
+        }catch(Exception $e){
+            $this->setError($e->getMessage());
+            return false;
+        }
+    }
+
+    private function setError($message)
+    {
+        $this->error = $message;
+        //file_put_contents('logs.txt',date('H:i:s').' '.$message."\r\n", FILE_APPEND);
+    }
+}

app/lib/dns/cloudflare.php

@@ -1,202 +1,277 @@
 <?php
+
 namespace app\lib\dns;
 
 use app\lib\DnsInterface;
 
-class cloudflare implements DnsInterface {
-	private $Email;
-	private $ApiKey;
-	private $baseUrl = 'https://api.cloudflare.com/client/v4';
-	private $error;
-	private $domain;
-	private $domainid;
+class cloudflare implements DnsInterface
+{
+    private $Email;
+    private $ApiKey;
+    private $baseUrl = 'https://api.cloudflare.com/client/v4';
+    private $error;
+    private $domain;
+    private $domainid;
+    private $proxy;
 
-	function __construct($config){
-		$this->Email = $config['ak'];
-		$this->ApiKey = $config['sk'];
-		$this->domain = $config['domain'];
-		$this->domainid = $config['domainid'];
-	}
+    function __construct($config)
+    {
+        $this->Email = $config['ak'];
+        $this->ApiKey = $config['sk'];
+        $this->domain = $config['domain'];
+        $this->domainid = $config['domainid'];
+        $this->proxy = isset($config['proxy']) ? $config['proxy'] == 1 : false;
+    }
 
-	public function getError(){
-		return $this->error;
-	}
+    public function getError()
+    {
+        return $this->error;
+    }
 
-	public function check(){
-		if($this->getDomainList() != false){
-			return true;
-		}
-		return false;
-	}
+    public function check()
+    {
+        if ($this->getDomainList() !== false) {
+            return true;
+        }
+        return false;
+    }
 
-	//获取域名列表
-	public function getDomainList($KeyWord=null, $PageNumber=1, $PageSize=20){
-		$param = ['page' => $PageNumber, 'per_page' => $PageSize, 'name' => $KeyWord];
-		$data = $this->send_reuqest('GET', '/zones', $param);
-		if($data){
-			$list = [];
-			foreach($data['result'] as $row){
-				$list[] = [
-					'DomainId' => $row['id'],
-					'Domain' => $row['name'],
-					'RecordCount' => 0,
-				];
-			}
-			return ['total' => $data['result_info']['total_count'], 'list' => $list];
-		}
-		return false;
-	}
+    //获取域名列表
+    public function getDomainList($KeyWord = null, $PageNumber = 1, $PageSize = 20)
+    {
+        $param = ['page' => $PageNumber, 'per_page' => $PageSize];
+        if (!empty($KeyWord)) {
+            $param['name'] = $KeyWord;
+        }
+        $data = $this->send_reuqest('GET', '/zones', $param);
+        if ($data) {
+            $list = [];
+            foreach ($data['result'] as $row) {
+                $list[] = [
+                    'DomainId' => $row['id'],
+                    'Domain' => $row['name'],
+                    'RecordCount' => 0,
+                ];
+            }
+            return ['total' => $data['result_info']['total_count'], 'list' => $list];
+        }
+        return false;
+    }
 
-	//获取解析记录列表
-	public function getDomainRecords($PageNumber=1, $PageSize=20, $KeyWord = null, $SubDomain = null, $Type = null, $Line = null, $Status = null){
-		$param = ['name' => $SubDomain, 'type' => $Type, 'search' => $KeyWord, 'page' => $PageNumber, 'per_page' => $PageSize];
-		if(!isNullOrEmpty($Line)){
-			$param['proxied'] = $Line == '1' ? 'true' : 'false';
-		}
-		$data = $this->send_reuqest('GET', '/zones/'.$this->domainid.'/dns_records', $param);
-		if($data){
-			$list = [];
-			foreach($data['result'] as $row){
-				$name = $row['zone_name'] == $row['name'] ? '@' : str_replace('.'.$row['zone_name'], '', $row['name']);
-				$list[] = [
-					'RecordId' => $row['id'],
-					'Domain' => $row['zone_name'],
-					'Name' => $name,
-					'Type' => $row['type'],
-					'Value' => $row['content'],
-					'Line' => $row['proxied'] ? '1' : '0',
-					'TTL' => $row['ttl'],
-					'MX' => isset($row['priority']) ? $row['priority'] : null,
-					'Status' => $row['locked'] ? '0' : '1',
-					'Weight' => null,
-					'Remark' => $row['comment'],
-					'UpdateTime' => $row['modified_on'],
-				];
-			}
-			return ['total' => $data['result_info']['total_count'], 'list' => $list];
-		}
-		return false;
-	}
+    //获取解析记录列表
+    public function getDomainRecords($PageNumber = 1, $PageSize = 20, $KeyWord = null, $SubDomain = null, $Value = null, $Type = null, $Line = null, $Status = null)
+    {
+        if (!isNullOrEmpty($Value)) $KeyWord = $Value;
+        $param = ['type' => $Type, 'search' => $KeyWord, 'page' => $PageNumber, 'per_page' => $PageSize];
+        if (!isNullOrEmpty($SubDomain)) {
+            if ($SubDomain == '@') $SubDomain = $this->domain;
+            else $SubDomain .= '.' . $this->domain;
+            $param['name'] = $SubDomain;
+        }
+        if (!isNullOrEmpty($Line)) {
+            $param['proxied'] = $Line == '1' ? 'true' : 'false';
+        }
+        $data = $this->send_reuqest('GET', '/zones/'.$this->domainid.'/dns_records', $param);
+        if ($data) {
+            $list = [];
+            foreach ($data['result'] as $row) {
+                $name = $this->domain == $row['name'] ? '@' : str_replace('.'.$this->domain, '', $row['name']);
+                $list[] = [
+                    'RecordId' => $row['id'],
+                    'Domain' => $this->domain,
+                    'Name' => $name,
+                    'Type' => $row['type'],
+                    'Value' => $row['content'],
+                    'Line' => $row['proxied'] ? '1' : '0',
+                    'TTL' => $row['ttl'],
+                    'MX' => isset($row['priority']) ? $row['priority'] : null,
+                    'Status' => '1',
+                    'Weight' => null,
+                    'Remark' => $row['comment'],
+                    'UpdateTime' => $row['modified_on'],
+                ];
+            }
+            return ['total' => $data['result_info']['total_count'], 'list' => $list];
+        }
+        return false;
+    }
 
-	//获取子域名解析记录列表
-	public function getSubDomainRecords($SubDomain, $PageNumber=1, $PageSize=20, $Type = null, $Line = null){
-		if($SubDomain == '@')$SubDomain=$this->domain;
-		else $SubDomain .= '.'.$this->domain;
-		return $this->getDomainRecords($PageNumber, $PageSize, null, $SubDomain, $Type, $Line);
-	}
+    //获取子域名解析记录列表
+    public function getSubDomainRecords($SubDomain, $PageNumber = 1, $PageSize = 20, $Type = null, $Line = null)
+    {
+        return $this->getDomainRecords($PageNumber, $PageSize, null, $SubDomain, null, $Type, $Line);
+    }
 
-	//获取解析记录详细信息
-	public function getDomainRecordInfo($RecordId){
-		$data = $this->send_reuqest('GET', '/zones/'.$this->domainid.'/dns_records/'.$RecordId);
-		if($data){
-			$name = $data['result']['zone_name'] == $data['result']['name'] ? '@' : str_replace('.'.$data['result']['zone_name'], '', $data['result']['name']);
-			return [
-				'RecordId' => $data['result']['id'],
-				'Domain' => $data['result']['zone_name'],
-				'Name' => str_replace('.'.$data['result']['zone_name'], '', $data['result']['name']),
-				'Type' => $data['result']['type'],
-				'Value' => $data['result']['content'],
-				'Line' => $data['result']['proxied'] ? '1' : '0',
-				'TTL' => $data['result']['ttl'],
-				'MX' => isset($data['result']['priority']) ? $data['result']['priority'] : null,
-				'Status' => $data['result']['locked'] ? '0' : '1',
-				'Weight' => null,
-				'Remark' => $data['result']['comment'],
-				'UpdateTime' => $data['result']['modified_on'],
-			];
-		}
-		return false;
-	}
+    //获取解析记录详细信息
+    public function getDomainRecordInfo($RecordId)
+    {
+        $data = $this->send_reuqest('GET', '/zones/'.$this->domainid.'/dns_records/'.$RecordId);
+        if ($data) {
+            $name = $this->domain == $data['result']['name'] ? '@' : str_replace('.' . $this->domain, '', $data['result']['name']);
+            return [
+                'RecordId' => $data['result']['id'],
+                'Domain' => $this->domain,
+                'Name' => $name,
+                'Type' => $data['result']['type'],
+                'Value' => $data['result']['content'],
+                'Line' => $data['result']['proxied'] ? '1' : '0',
+                'TTL' => $data['result']['ttl'],
+                'MX' => isset($data['result']['priority']) ? $data['result']['priority'] : null,
+                'Status' => '1',
+                'Weight' => null,
+                'Remark' => $data['result']['comment'],
+                'UpdateTime' => $data['result']['modified_on'],
+            ];
+        }
+        return false;
+    }
 
-	//添加解析记录
-	public function addDomainRecord($Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Remark = null){
-		$param = ['name' => $Name, 'type' => $this->convertType($Type), 'content' => $Value, 'proxied' => $Line=='1', 'ttl' => intval($TTL), 'comment' => $Remark];
-		if($Type == 'MX')$param['priority'] = intval($MX);
-		$data = $this->send_reuqest('POST', '/zones/'.$this->domainid.'/dns_records', $param);
-		return is_array($data) ? $data['result']['id'] : false;
-	}
+    //添加解析记录
+    public function addDomainRecord($Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Weight = null, $Remark = null)
+    {
+        $param = ['name' => $Name, 'type' => $this->convertType($Type), 'content' => $Value, 'proxied' => $Line == '1', 'ttl' => intval($TTL), 'comment' => $Remark];
+        if ($Type == 'MX') $param['priority'] = intval($MX);
+        if ($Type == 'CAA' || $Type == 'SRV') {
+            unset($param['content']);
+            $param['data'] = $this->convertValue($Value, $Type);
+        }
+        $data = $this->send_reuqest('POST', '/zones/'.$this->domainid.'/dns_records', $param);
+        return is_array($data) ? $data['result']['id'] : false;
+    }
 
-	//修改解析记录
-	public function updateDomainRecord($RecordId, $Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Remark = null){
-		$param = ['name' => $Name, 'type' => $this->convertType($Type), 'content' => $Value, 'proxied' => $Line=='1', 'ttl' => intval($TTL), 'comment' => $Remark];
-		if($Type == 'MX')$param['priority'] = intval($MX);
-		$data = $this->send_reuqest('PATCH', '/zones/'.$this->domainid.'/dns_records/'.$RecordId, $param);
-		return is_array($data);
-	}
+    //修改解析记录
+    public function updateDomainRecord($RecordId, $Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Weight = null, $Remark = null)
+    {
+        $param = ['name' => $Name, 'type' => $this->convertType($Type), 'content' => $Value, 'proxied' => $Line == '1', 'ttl' => intval($TTL), 'comment' => $Remark];
+        if ($Type == 'MX') $param['priority'] = intval($MX);
+        if ($Type == 'CAA' || $Type == 'SRV') {
+            unset($param['content']);
+            $param['data'] = $this->convertValue($Value, $Type);
+        }
+        $data = $this->send_reuqest('PATCH', '/zones/'.$this->domainid.'/dns_records/'.$RecordId, $param);
+        return is_array($data);
+    }
 
-	//修改解析记录备注
-	public function updateDomainRecordRemark($RecordId, $Remark){
-		return false;
-	}
+    //修改解析记录备注
+    public function updateDomainRecordRemark($RecordId, $Remark)
+    {
+        return false;
+    }
 
-	//删除解析记录
-	public function deleteDomainRecord($RecordId){
-		$data = $this->send_reuqest('DELETE', '/zones/'.$this->domainid.'/dns_records/'.$RecordId);
-		return is_array($data);
-	}
+    //删除解析记录
+    public function deleteDomainRecord($RecordId)
+    {
+        $data = $this->send_reuqest('DELETE', '/zones/'.$this->domainid.'/dns_records/'.$RecordId);
+        return is_array($data);
+    }
 
-	//设置解析记录状态
-	public function setDomainRecordStatus($RecordId, $Status){
-		return false;
-	}
+    //设置解析记录状态
+    public function setDomainRecordStatus($RecordId, $Status)
+    {
+        return false;
+    }
 
-	//获取解析记录操作日志
-	public function getDomainRecordLog($PageNumber = 1, $PageSize = 20, $KeyWord = null, $StartDate = null, $endDate = null){
-		return false;
-	}
+    //获取解析记录操作日志
+    public function getDomainRecordLog($PageNumber = 1, $PageSize = 20, $KeyWord = null, $StartDate = null, $endDate = null)
+    {
+        return false;
+    }
 
-	//获取解析线路列表
-	public function getRecordLine(){
-		return ['0'=>['name'=>'仅DNS', 'parent'=>null], '1'=>['name'=>'已代理', 'parent'=>null]];
-	}
+    //获取解析线路列表
+    public function getRecordLine()
+    {
+        return ['0' => ['name' => '仅DNS', 'parent' => null], '1' => ['name' => '已代理', 'parent' => null]];
+    }
 
-	//获取域名信息
-	public function getDomainInfo(){
-		$data = $this->send_reuqest('GET', '/zones/'.$this->domainid);
-		if($data){
-			return $data['result'];
-		}
-		return false;
-	}
+    //获取域名信息
+    public function getDomainInfo()
+    {
+        $data = $this->send_reuqest('GET', '/zones/'.$this->domainid);
+        if ($data) {
+            return $data['result'];
+        }
+        return false;
+    }
 
-	//获取域名最低TTL
-	public function getMinTTL(){
-		return false;
-	}
+    //获取域名最低TTL
+    public function getMinTTL()
+    {
+        return false;
+    }
 
-	private function convertType($type){
-		$convert_dict = ['REDIRECT_URL'=>'URI', 'FORWARD_URL'=>'URI'];
-		if(array_key_exists($type, $convert_dict)){
-			return $convert_dict[$type];
-		}
-		return $type;
-	}
+    private function convertType($type)
+    {
+        $convert_dict = ['REDIRECT_URL' => 'URI', 'FORWARD_URL' => 'URI'];
+        if (array_key_exists($type, $convert_dict)) {
+            return $convert_dict[$type];
+        }
+        return $type;
+    }
 
-	private function send_reuqest($method, $path, $params = null){
-		$url = $this->baseUrl . $path;
-		
-		$headers = [
-			'X-Auth-Email: '.$this->Email,
-			'X-Auth-Key: '.$this->ApiKey,
-		];
+    private function convertValue($value, $type)
+    {
+        if ($type == 'SRV') {
+            $arr = explode(' ', $value);
+            if (count($arr) > 3) {
+                $data = [
+                    'priority' => intval($arr[0]),
+                    'weight' => intval($arr[1]),
+                    'port' => intval($arr[2]),
+                    'target' => $arr[3],
+                ];
+            } else {
+                $data = [
+                    'weight' => intval($arr[0]),
+                    'port' => intval($arr[1]),
+                    'target' => $arr[2],
+                ];
+            }
+        } elseif ($type == 'CAA') {
+            $arr = explode(' ', $value);
+            $data = [
+                'flags' => intval($arr[0]),
+                'tag' => $arr[1],
+                'value' => trim($arr[2], '"'),
+            ];
+        }
+        return $data;
+    }
 
-		$body = '';
+    private function send_reuqest($method, $path, $params = null)
+    {
+        $url = $this->baseUrl . $path;
+
+        if (preg_match('/^[0-9a-z]+$/i', $this->ApiKey)) {
+            $headers = [
+                'X-Auth-Email: ' . $this->Email,
+                'X-Auth-Key: ' . $this->ApiKey,
+            ];
+        } else {
+            $headers = [
+                'Authorization: Bearer ' . $this->ApiKey,
+            ];
+        }
+
+        $body = '';
         if ($method == 'GET' || $method == 'DELETE') {
             if ($params) {
                 $url .= '?' . http_build_query($params);
             }
         } else {
             $body = json_encode($params);
-			$headers[] = 'Content-Type: application/json';
+            $headers[] = 'Content-Type: application/json';
         }
 
-		$ch = curl_init($url);
-		curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
-		curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
-		curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
-		curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
-		curl_setopt($ch, CURLOPT_TIMEOUT, 10);
-		if ($method == 'POST') {
+        $ch = curl_init($url);
+        if ($this->proxy) {
+            curl_set_proxy($ch);
+        }
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_TIMEOUT, 10);
+        if ($method == 'POST') {
             curl_setopt($ch, CURLOPT_POST, true);
             curl_setopt($ch, CURLOPT_POSTFIELDS, $body);
         } elseif ($method == 'PUT') {
@@ -208,30 +283,31 @@ class cloudflare implements DnsInterface {
         } elseif ($method == 'DELETE') {
             curl_setopt($ch, CURLOPT_CUSTOMREQUEST, 'DELETE');
         }
-		$response = curl_exec($ch);
-		$errno = curl_errno($ch);
-		if ($errno) {
-			$this->setError('Curl error: ' . curl_error($ch));
-		}
-		curl_close($ch);
-		if ($errno) return false;
+        $response = curl_exec($ch);
+        $errno = curl_errno($ch);
+        if ($errno) {
+            $this->setError('Curl error: ' . curl_error($ch));
+        }
+        curl_close($ch);
+        if ($errno) return false;
 
-		$arr=json_decode($response,true);
-		if($arr){
-			if($arr['success']){
-				return $arr;
-			}else{
-				$this->setError(isset($arr['errors'][0])?$arr['errors'][0]['message']:'未知错误');
-				return false;
-			}
-		}else{
-			$this->setError('返回数据解析失败');
-			return false;
-		}
-	}
+        $arr = json_decode($response, true);
+        if ($arr) {
+            if ($arr['success']) {
+                return $arr;
+            } else {
+                $this->setError(isset($arr['errors'][0]) ? $arr['errors'][0]['message'] : '未知错误');
+                return false;
+            }
+        } else {
+            $this->setError('返回数据解析失败');
+            return false;
+        }
+    }
 
-	private function setError($message){
-		$this->error = $message;
-		//file_put_contents('logs.txt',date('H:i:s').' '.$message."\r\n", FILE_APPEND);
-	}
-}
+    private function setError($message)
+    {
+        $this->error = $message;
+        //file_put_contents('logs.txt',date('H:i:s').' '.$message."\r\n", FILE_APPEND);
+    }
+}

app/lib/dns/dnsla.php

@@ -1,251 +1,294 @@
 <?php
+
 namespace app\lib\dns;
 
 use app\lib\DnsInterface;
 
-class dnsla implements DnsInterface {
-	private $apiid;
-	private $apisecret;
-	private $baseUrl = 'https://api.dns.la';
-	private $typeList = [1 => 'A', 2 => 'NS', 5 => 'CNAME', 15 => 'MX', 16 => 'TXT', 28 => 'AAAA', 33 => 'SRV', 257 => 'CAA', 256 => 'URL转发'];
-	private $error;
-	private $domain;
-	private $domainid;
+class dnsla implements DnsInterface
+{
+    private $apiid;
+    private $apisecret;
+    private $baseUrl = 'https://api.dns.la';
+    private $typeList = [1 => 'A', 2 => 'NS', 5 => 'CNAME', 15 => 'MX', 16 => 'TXT', 28 => 'AAAA', 33 => 'SRV', 257 => 'CAA', 256 => 'URL转发'];
+    private $error;
+    private $domain;
+    private $domainid;
+    private $proxy;
 
-	function __construct($config){
-		$this->apiid = $config['ak'];
-		$this->apisecret = $config['sk'];
-		$this->domain = $config['domain'];
-		$this->domainid = $config['domainid'];
-	}
+    public function __construct($config)
+    {
+        $this->apiid = $config['ak'];
+        $this->apisecret = $config['sk'];
+        $this->domain = $config['domain'];
+        $this->domainid = $config['domainid'];
+        $this->proxy = isset($config['proxy']) ? $config['proxy'] == 1 : false;
+    }
 
-	public function getError(){
-		return $this->error;
-	}
+    public function getError()
+    {
+        return $this->error;
+    }
 
-	public function check(){
-		if($this->getDomainList() != false){
-			return true;
-		}
-		return false;
-	}
+    public function check()
+    {
+        if ($this->getDomainList() != false) {
+            return true;
+        }
+        return false;
+    }
 
-	//获取域名列表
-	public function getDomainList($KeyWord=null, $PageNumber=1, $PageSize=20){
-		$param = ['pageIndex' => $PageNumber, 'pageSize' => $PageSize];
-		$data = $this->execute('GET', '/api/domainList', $param);
-		if($data){
-			$list = [];
-			foreach($data['results'] as $row){
-				$list[] = [
-					'DomainId' => $row['id'],
-					'Domain' => rtrim($row['displayDomain'], '.'),
-					'RecordCount' => 0,
-				];
-			}
-			return ['total' => $data['total'], 'list' => $list];
-		}
-		return false;
-	}
+    //获取域名列表
+    public function getDomainList($KeyWord = null, $PageNumber = 1, $PageSize = 20)
+    {
+        $param = ['pageIndex' => $PageNumber, 'pageSize' => $PageSize];
+        $data = $this->execute('GET', '/api/domainList', $param);
+        if ($data) {
+            $list = [];
+            foreach ($data['results'] as $row) {
+                $list[] = [
+                    'DomainId' => $row['id'],
+                    'Domain' => rtrim($row['displayDomain'], '.'),
+                    'RecordCount' => 0,
+                ];
+            }
+            return ['total' => $data['total'], 'list' => $list];
+        }
+        return false;
+    }
 
-	//获取解析记录列表
-	public function getDomainRecords($PageNumber=1, $PageSize=20, $KeyWord = null, $SubDomain = null, $Type = null, $Line = null, $Status = null){
-		$param = ['domainId' => $this->domainid, 'pageIndex' => $PageNumber, 'pageSize' => $PageSize];
-		if(!isNullOrEmpty(($KeyWord))){
-			$param['host'] = $KeyWord;
-		}
-		if(!isNullOrEmpty(($Type))){
-			$param['type'] = $this->convertType($Type);
-		}
-		if(!isNullOrEmpty(($Line))){
-			$param['lineId'] = $Line;
-		}
-		if(!isNullOrEmpty(($SubDomain))){
-			$param['host'] = $SubDomain;
-		}
-		$data = $this->execute('GET', '/api/recordList', $param);
-		if($data){
-			$list = [];
-			foreach($data['results'] as $row){
-				$list[] = [
-					'RecordId' => $row['id'],
-					'Domain' => $this->domain,
-					'Name' => $row['host'],
-					'Type' => $this->convertTypeId($row['type'], isset($row['domaint']) ? $row['domaint'] : false),
-					'Value' => $row['data'],
-					'Line' => $row['lineId'],
-					'TTL' => $row['ttl'],
-					'MX' => isset($row['preference']) ? $row['preference'] : null,
-					'Status' => $row['disable'] ? '0' : '1',
-					'Weight' => isset($row['weight']) ? $row['weight'] : null,
-					'Remark' => null,
-					'UpdateTime' => date('Y-m-d H:i:s', $row['updatedAt']),
-				];
-			}
-			return ['total' => $data['total'], 'list' => $list];
-		}
-		return false;
-	}
+    //获取解析记录列表
+    public function getDomainRecords($PageNumber = 1, $PageSize = 20, $KeyWord = null, $SubDomain = null, $Value = null, $Type = null, $Line = null, $Status = null)
+    {
+        $param = ['domainId' => $this->domainid, 'pageIndex' => $PageNumber, 'pageSize' => $PageSize];
+        if (!isNullOrEmpty(($KeyWord))) {
+            $param['host'] = $KeyWord;
+        }
+        if (!isNullOrEmpty(($Type))) {
+            $param['type'] = $this->convertType($Type);
+        }
+        if (!isNullOrEmpty(($Line))) {
+            $param['lineId'] = $Line;
+        }
+        if (!isNullOrEmpty(($SubDomain))) {
+            $param['host'] = $SubDomain;
+        }
+        if (!isNullOrEmpty(($Value))) {
+            $param['data'] = $Value;
+        }
+        $data = $this->execute('GET', '/api/recordList', $param);
+        if ($data) {
+            $list = [];
+            foreach ($data['results'] as $row) {
+                $list[] = [
+                    'RecordId' => $row['id'],
+                    'Domain' => $this->domain,
+                    'Name' => $row['host'],
+                    'Type' => $this->convertTypeId($row['type'], isset($row['domaint']) ? $row['domaint'] : false),
+                    'Value' => $row['data'],
+                    'Line' => $row['lineId'],
+                    'TTL' => $row['ttl'],
+                    'MX' => isset($row['preference']) ? $row['preference'] : null,
+                    'Status' => $row['disable'] ? '0' : '1',
+                    'Weight' => isset($row['weight']) ? $row['weight'] : null,
+                    'Remark' => null,
+                    'UpdateTime' => date('Y-m-d H:i:s', $row['updatedAt']),
+                ];
+            }
+            return ['total' => $data['total'], 'list' => $list];
+        }
+        return false;
+    }
 
-	//获取子域名解析记录列表
-	public function getSubDomainRecords($SubDomain, $PageNumber=1, $PageSize=20, $Type = null, $Line = null){
-		if($SubDomain == '')$SubDomain='@';
-		return $this->getDomainRecords($PageNumber, $PageSize, null, $SubDomain, $Type, $Line);
-	}
+    //获取子域名解析记录列表
+    public function getSubDomainRecords($SubDomain, $PageNumber = 1, $PageSize = 20, $Type = null, $Line = null)
+    {
+        if ($SubDomain == '') $SubDomain = '@';
+        return $this->getDomainRecords($PageNumber, $PageSize, null, $SubDomain, null, $Type, $Line);
+    }
 
-	//获取解析记录详细信息
-	public function getDomainRecordInfo($RecordId){
-		return false;
-	}
+    //获取解析记录详细信息
+    public function getDomainRecordInfo($RecordId)
+    {
+        return false;
+    }
 
-	//添加解析记录
-	public function addDomainRecord($Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Remark = null){
-		$param = ['domainId' => $this->domainid, 'type' => $this->convertType($Type), 'host' => $Name, 'data' => $Value, 'ttl' => intval($TTL), 'lineId' => $Line];
-		if($Type == 'MX')$param['preference'] = intval($MX);
-		if($Type == 'REDIRECT_URL'){$param['type'] = 256;$param['dominant'] = true;}
-		elseif($Type == 'FORWARD_URL'){$param['type'] = 256;$param['dominant'] = false;}
-		$data = $this->execute('POST', '/api/record', $param);
-		return is_array($data) ? $data['id'] : false;
-	}
+    //添加解析记录
+    public function addDomainRecord($Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Weight = null, $Remark = null)
+    {
+        $param = ['domainId' => $this->domainid, 'type' => $this->convertType($Type), 'host' => $Name, 'data' => $Value, 'ttl' => intval($TTL), 'lineId' => $Line];
+        if ($Type == 'MX') $param['preference'] = intval($MX);
+        if ($Type == 'REDIRECT_URL') {
+            $param['type'] = 256;
+            $param['dominant'] = true;
+        } elseif ($Type == 'FORWARD_URL') {
+            $param['type'] = 256;
+            $param['dominant'] = false;
+        }
+        if ($Weight > 0) $param['weight'] = $Weight;
+        $data = $this->execute('POST', '/api/record', $param);
+        return is_array($data) ? $data['id'] : false;
+    }
 
-	//修改解析记录
-	public function updateDomainRecord($RecordId, $Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Remark = null){
-		$param = ['id' => $RecordId, 'type' => $this->convertType($Type), 'host' => $Name, 'data' => $Value, 'ttl' => intval($TTL), 'lineId' => $Line];
-		if($Type == 'MX')$param['preference'] = intval($MX);
-		if($Type == 'REDIRECT_URL'){$param['type'] = 256;$param['dominant'] = true;}
-		elseif($Type == 'FORWARD_URL'){$param['type'] = 256;$param['dominant'] = false;}
-		$data = $this->execute('PUT', '/api/record', $param);
-		return $data!==false;
-	}
+    //修改解析记录
+    public function updateDomainRecord($RecordId, $Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Weight = null, $Remark = null)
+    {
+        $param = ['id' => $RecordId, 'type' => $this->convertType($Type), 'host' => $Name, 'data' => $Value, 'ttl' => intval($TTL), 'lineId' => $Line];
+        if ($Type == 'MX') $param['preference'] = intval($MX);
+        if ($Type == 'REDIRECT_URL') {
+            $param['type'] = 256;
+            $param['dominant'] = true;
+        } elseif ($Type == 'FORWARD_URL') {
+            $param['type'] = 256;
+            $param['dominant'] = false;
+        }
+        if ($Weight > 0) $param['weight'] = $Weight;
+        $data = $this->execute('PUT', '/api/record', $param);
+        return $data !== false;
+    }
 
-	//修改解析记录备注
-	public function updateDomainRecordRemark($RecordId, $Remark){
-		return false;
-	}
+    //修改解析记录备注
+    public function updateDomainRecordRemark($RecordId, $Remark)
+    {
+        return false;
+    }
 
-	//删除解析记录
-	public function deleteDomainRecord($RecordId){
-		$param = ['id' => $RecordId];
-		$data = $this->execute('DELETE', '/api/record', $param);
-		return $data!==false;
-	}
+    //删除解析记录
+    public function deleteDomainRecord($RecordId)
+    {
+        $param = ['id' => $RecordId];
+        $data = $this->execute('DELETE', '/api/record', $param);
+        return $data !== false;
+    }
 
-	//设置解析记录状态
-	public function setDomainRecordStatus($RecordId, $Status){
-		$param = ['id' => $RecordId, 'disable' => $Status == '0' ? true : false];
-		$data = $this->execute('PUT', '/api/recordDisable', $param);
-		return $data!==false;
-	}
+    //设置解析记录状态
+    public function setDomainRecordStatus($RecordId, $Status)
+    {
+        $param = ['id' => $RecordId, 'disable' => $Status == '0' ? true : false];
+        $data = $this->execute('PUT', '/api/recordDisable', $param);
+        return $data !== false;
+    }
 
-	//获取解析记录操作日志
-	public function getDomainRecordLog($PageNumber = 1, $PageSize = 20, $KeyWord = null, $StartDate = null, $endDate = null){
-		return false;
-	}
+    //获取解析记录操作日志
+    public function getDomainRecordLog($PageNumber = 1, $PageSize = 20, $KeyWord = null, $StartDate = null, $endDate = null)
+    {
+        return false;
+    }
 
-	//获取解析线路列表
-	public function getRecordLine(){
-		$param = ['domain' => $this->domain];
-		$data = $this->execute('GET', '/api/availableLine', $param);
-		if($data){
-			array_multisort(array_column($data, 'order'), SORT_ASC, $data);
-			$list = [];
-			foreach($data as $row){
-				if($row['id'] == '0') $row['id'] = '';
-				$list[$row['id']] = ['name'=>$row['value'], 'parent'=>!empty($row['pid']) ? $row['pid'] : null];
-			}
-			return $list;
-		}
-		return false;
-	}
-	
-	//获取域名信息
-	public function getDomainInfo(){
-		$param = ['id' => $this->domainid];
-		$data = $this->execute('GET', '/api/domain', $param);
-		return $data;
-	}
+    //获取解析线路列表
+    public function getRecordLine()
+    {
+        $param = ['domain' => $this->domain];
+        $data = $this->execute('GET', '/api/availableLine', $param);
+        if ($data) {
+            array_multisort(array_column($data, 'order'), SORT_ASC, $data);
+            $list = [];
+            foreach ($data as $row) {
+                if ($row['id'] == '0') $row['id'] = '';
+                $list[$row['id']] = ['name' => $row['value'], 'parent' => !empty($row['pid']) ? $row['pid'] : null];
+            }
+            return $list;
+        }
+        return false;
+    }
 
-	//获取域名最低TTL
-	public function getMinTTL(){
-		$param = ['id' => $this->domainid];
-		$data = $this->execute('GET', '/api/dnsMeasures', $param);
-		if($data && isset($data['minTTL'])){
-			return $data['minTTL'];
-		}
-		return false;
-	}
+    //获取域名信息
+    public function getDomainInfo()
+    {
+        $param = ['id' => $this->domainid];
+        $data = $this->execute('GET', '/api/domain', $param);
+        return $data;
+    }
 
-	private function convertType($type){
-		$typeList = array_flip($this->typeList);
-		return $typeList[$type];
-	}
+    //获取域名最低TTL
+    public function getMinTTL()
+    {
+        $param = ['id' => $this->domainid];
+        $data = $this->execute('GET', '/api/dnsMeasures', $param);
+        if ($data && isset($data['minTTL'])) {
+            return $data['minTTL'];
+        }
+        return false;
+    }
 
-	private function convertTypeId($typeId, $domaint){
-		if($typeId == 256) return $domaint ? 'REDIRECT_URL' : 'FORWARD_URL';
-		return $this->typeList[$typeId];
-	}
+    private function convertType($type)
+    {
+        $typeList = array_flip($this->typeList);
+        return $typeList[$type];
+    }
 
-	private function execute($method, $path, $params = null){
-		$token = base64_encode($this->apiid.':'.$this->apisecret);
-		$header = ['Authorization: Basic '.$token, 'Content-Type: application/json; charset=utf-8'];
-		if($method == 'POST' || $method == 'PUT'){
-			$response = $this->curl($method, $path, $header, json_encode($params));
-		}else{
-			if($params){
-				$path .= '?'.http_build_query($params);
-			}
-			$response = $this->curl($method, $path, $header);
-		}
-		if(!$response){
-			return false;
-		}
-		$arr=json_decode($response,true);
-		if($arr){
-			if($arr['code'] == 200){
-				return $arr['data'];
-			}else{
-				$this->setError($arr['msg']);
-				return false;
-			}
-		}else{
-			$this->setError('返回数据解析失败');
-			return false;
-		}
-	}
+    private function convertTypeId($typeId, $domaint)
+    {
+        if ($typeId == 256) return $domaint ? 'REDIRECT_URL' : 'FORWARD_URL';
+        return $this->typeList[$typeId];
+    }
 
-	private function curl($method, $path, $header, $body = null, $isPut = false){
-		$url = $this->baseUrl . $path;
-		$ch = curl_init($url);
-		curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
-		curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
-		curl_setopt($ch, CURLOPT_HTTPHEADER, $header);
-		curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
-		curl_setopt($ch, CURLOPT_TIMEOUT, 10);
-		curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
-		if ($body) {
+    private function execute($method, $path, $params = null)
+    {
+        $token = base64_encode($this->apiid.':'.$this->apisecret);
+        $header = ['Authorization: Basic '.$token, 'Content-Type: application/json; charset=utf-8'];
+        if ($method == 'POST' || $method == 'PUT') {
+            $response = $this->curl($method, $path, $header, json_encode($params));
+        } else {
+            if ($params) {
+                $path .= '?'.http_build_query($params);
+            }
+            $response = $this->curl($method, $path, $header);
+        }
+        if (!$response) {
+            return false;
+        }
+        $arr = json_decode($response, true);
+        if ($arr) {
+            if ($arr['code'] == 200) {
+                return $arr['data'];
+            } else {
+                $this->setError($arr['msg']);
+                return false;
+            }
+        } else {
+            $this->setError('返回数据解析失败');
+            return false;
+        }
+    }
+
+    private function curl($method, $path, $header, $body = null)
+    {
+        $url = $this->baseUrl . $path;
+        $ch = curl_init($url);
+        if ($this->proxy) {
+            curl_set_proxy($ch);
+        }
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, $header);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_TIMEOUT, 10);
+        curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
+        if ($body) {
             curl_setopt($ch, CURLOPT_POSTFIELDS, $body);
         }
-		$response = curl_exec($ch);
-		$errno = curl_errno($ch);
-		if ($errno) {
-			$this->setError('Curl error: ' . curl_error($ch));
-		}
-		$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
-		curl_close($ch);
-		if ($errno) return false;
-		if($httpCode==200){
-			return $response;
-		}elseif($httpCode==401){
-			$this->setError('认证失败');
-			return false;
-		}else{
-			$this->setError('http code: '.$httpCode);
-			return false;
-		}
-	}
+        $response = curl_exec($ch);
+        $errno = curl_errno($ch);
+        if ($errno) {
+            $this->setError('Curl error: ' . curl_error($ch));
+        }
+        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        curl_close($ch);
+        if ($errno) return false;
+        if ($httpCode == 200) {
+            return $response;
+        } elseif ($httpCode == 401) {
+            $this->setError('认证失败');
+            return false;
+        } else {
+            $this->setError('http code: '.$httpCode);
+            return false;
+        }
+    }
 
-	private function setError($message){
-		$this->error = $message;
-		//file_put_contents('logs.txt',date('H:i:s').' '.$message."\r\n", FILE_APPEND);
-	}
-}
+    private function setError($message)
+    {
+        $this->error = $message;
+        //file_put_contents('logs.txt',date('H:i:s').' '.$message."\r\n", FILE_APPEND);
+    }
+}

app/lib/dns/dnspod.php

@@ -1,369 +1,360 @@
 <?php
+
 namespace app\lib\dns;
 
 use app\lib\DnsInterface;
+use app\lib\client\TencentCloud;
+use Exception;
 
-class dnspod implements DnsInterface {
-	private $SecretId;
-	private $SecretKey;
-	private $endpoint = "dnspod.tencentcloudapi.com";
-	private $service = "dnspod";
-	private $version = "2021-03-23";
-	private $error;
-	private $domain;
-	private $domainid;
+class dnspod implements DnsInterface
+{
+    private $SecretId;
+    private $SecretKey;
+    private $endpoint = "dnspod.tencentcloudapi.com";
+    private $service = "dnspod";
+    private $version = "2021-03-23";
+    private $error;
+    private $domain;
+    private $domainid;
+    private $domainInfo;
+    private TencentCloud $client;
 
-	function __construct($config){
-		$this->SecretId = $config['ak'];
-		$this->SecretKey = $config['sk'];
-		$this->domain = $config['domain'];
-	}
+    public function __construct($config)
+    {
+        $this->SecretId = $config['ak'];
+        $this->SecretKey = $config['sk'];
+        $proxy = isset($config['proxy']) ? $config['proxy'] == 1 : false;
+        $this->client = new TencentCloud($this->SecretId, $this->SecretKey, $this->endpoint, $this->service, $this->version, null, $proxy);
+        $this->domain = $config['domain'];
+    }
 
-	public function getError(){
-		return $this->error;
-	}
+    public function getError()
+    {
+        return $this->error;
+    }
 
-	public function check(){
-		if($this->getAccountInfo() != false){
-			return true;
-		}
-		return false;
-	}
+    public function check()
+    {
+        if ($this->getDomainList() != false) {
+            return true;
+        }
+        return false;
+    }
 
-	//获取域名列表
-	public function getDomainList($KeyWord=null, $PageNumber=1, $PageSize=20){
-		$action = 'DescribeDomainList';
-		$offset = ($PageNumber-1)*$PageSize;
-		$param = ['Offset' => $offset, 'Limit' => $PageSize, 'Keyword' => $KeyWord];
-		$data = $this->send_reuqest($action, $param);
-		if($data){
-			$list = [];
-			foreach($data['DomainList'] as $row){
-				$list[] = [
-					'DomainId' => $row['DomainId'],
-					'Domain' => $row['Name'],
-					'RecordCount' => $row['RecordCount'],
-				];
-			}
-			return ['total' => $data['DomainCountInfo']['DomainTotal'], 'list' => $list];
-		}
-		return false;
-	}
+    //获取域名列表
+    public function getDomainList($KeyWord = null, $PageNumber = 1, $PageSize = 20)
+    {
+        $action = 'DescribeDomainList';
+        $offset = ($PageNumber - 1) * $PageSize;
+        $param = ['Offset' => $offset, 'Limit' => $PageSize, 'Keyword' => $KeyWord];
+        $data = $this->send_request($action, $param);
+        if ($data) {
+            $list = [];
+            foreach ($data['DomainList'] as $row) {
+                $list[] = [
+                    'DomainId' => $row['DomainId'],
+                    'Domain' => $row['Name'],
+                    'RecordCount' => $row['RecordCount'],
+                ];
+            }
+            return ['total' => $data['DomainCountInfo']['DomainTotal'], 'list' => $list];
+        }
+        return false;
+    }
 
-	//获取解析记录列表
-	public function getDomainRecords($PageNumber=1, $PageSize=20, $KeyWord = null, $SubDomain = null, $Type = null, $Line = null, $Status = null){
-		$offset = ($PageNumber-1)*$PageSize;
-		if(!isNullOrEmpty($Status)){
-			$action = 'DescribeRecordFilterList';
-			$Status = $Status == '1' ? 'ENABLE' : 'DISABLE';
-			$param = ['Domain' => $this->domain, 'Subdomain' => $SubDomain, 'Keyword' => $KeyWord, 'Offset' => $offset, 'Limit' => $PageSize, 'RecordStatus' => [$Status]];
-			if(!isNullOrEmpty($Type)) $param['RecordType'] = [$this->convertType($Type)];
-			if(!isNullOrEmpty($Line)) $param['RecordLine'] = [$Line];
-		}else{
-			$action = 'DescribeRecordList';
-			$param = ['Domain' => $this->domain, 'Subdomain' => $SubDomain, 'RecordType' => $this->convertType($Type), 'RecordLineId' => $Line, 'Keyword' => $KeyWord, 'Offset' => $offset, 'Limit' => $PageSize];
-		}
-		$data = $this->send_reuqest($action, $param);
-		if($data){
-			$list = [];
-			foreach($data['RecordList'] as $row){
-				//if($row['Name'] == '@' && $row['Type'] == 'NS') continue;
-				$list[] = [
-					'RecordId' => $row['RecordId'],
-					'Domain' => $this->domain,
-					'Name' => $row['Name'],
-					'Type' => $this->convertTypeId($row['Type']),
-					'Value' => $row['Value'],
-					'Line' => $row['LineId'],
-					'TTL' => $row['TTL'],
-					'MX' => $row['MX'],
-					'Status' => $row['Status'] == 'ENABLE' ? '1' : '0',
-					'Weight' => $row['Weight'],
-					'Remark' => $row['Remark'],
-					'UpdateTime' => $row['UpdatedOn'],
-				];
-			}
-			return ['total' => $data['RecordCountInfo']['TotalCount'], 'list' => $list];
-		}elseif($this->error == '记录列表为空。'){
-			return ['total' => 0, 'list' => []];
-		}
-		return false;
-	}
+    //获取解析记录列表
+    public function getDomainRecords($PageNumber = 1, $PageSize = 20, $KeyWord = null, $SubDomain = null, $Value = null, $Type = null, $Line = null, $Status = null)
+    {
+        $offset = ($PageNumber - 1) * $PageSize;
+        if (!isNullOrEmpty($Status) || !isNullOrEmpty($Value)) {
+            $action = 'DescribeRecordFilterList';
+            $param = ['Domain' => $this->domain, 'Offset' => $offset, 'Limit' => $PageSize, 'RecordValue' => $Value];
+            if (!isNullOrEmpty($SubDomain)) $param['SubDomain'] = $SubDomain;
+            if (!isNullOrEmpty($KeyWord)) $param['Keyword'] = $KeyWord;
+            if (!isNullOrEmpty($Value)) $param['RecordValue'] = $Value;
+            if (!isNullOrEmpty($Status)) {
+                $Status = $Status == '1' ? 'ENABLE' : 'DISABLE';
+                $param['RecordStatus'] = [$Status];
+            }
+            if (!isNullOrEmpty($Type)) $param['RecordType'] = [$this->convertType($Type)];
+            if (!isNullOrEmpty($Line)) $param['RecordLine'] = [$Line];
+        } else {
+            $action = 'DescribeRecordList';
+            $param = ['Domain' => $this->domain, 'Subdomain' => $SubDomain, 'RecordType' => $this->convertType($Type), 'RecordLineId' => $Line, 'Keyword' => $KeyWord, 'Offset' => $offset, 'Limit' => $PageSize];
+        }
+        $data = $this->send_request($action, $param);
+        if ($data) {
+            $list = [];
+            foreach ($data['RecordList'] as $row) {
+                //if($row['Name'] == '@' && $row['Type'] == 'NS') continue;
+                $list[] = [
+                    'RecordId' => $row['RecordId'],
+                    'Domain' => $this->domain,
+                    'Name' => $row['Name'],
+                    'Type' => $this->convertTypeId($row['Type']),
+                    'Value' => $row['Value'],
+                    'Line' => $row['LineId'],
+                    'TTL' => $row['TTL'],
+                    'MX' => $row['MX'],
+                    'Status' => $row['Status'] == 'ENABLE' ? '1' : '0',
+                    'Weight' => $row['Weight'],
+                    'Remark' => $row['Remark'],
+                    'UpdateTime' => $row['UpdatedOn'],
+                ];
+            }
+            return ['total' => $data['RecordCountInfo']['TotalCount'], 'list' => $list];
+        } elseif ($this->error == '记录列表为空。' || $this->error == 'No records on the list.') {
+            return ['total' => 0, 'list' => []];
+        }
+        return false;
+    }
 
-	//获取子域名解析记录列表
-	public function getSubDomainRecords($SubDomain, $PageNumber=1, $PageSize=20, $Type = null, $Line = null){
-		if($SubDomain == '')$SubDomain='@';
-		return $this->getDomainRecords($PageNumber, $PageSize, null, $SubDomain, $Type, $Line);
-	}
+    //获取子域名解析记录列表
+    public function getSubDomainRecords($SubDomain, $PageNumber = 1, $PageSize = 20, $Type = null, $Line = null)
+    {
+        if ($SubDomain == '') $SubDomain = '@';
+        return $this->getDomainRecords($PageNumber, $PageSize, null, $SubDomain, null, $Type, $Line);
+    }
 
-	//获取解析记录详细信息
-	public function getDomainRecordInfo($RecordId){
-		$action = 'DescribeRecord';
-		$param = ['Domain' => $this->domain, 'RecordId' => intval($RecordId)];
-		$data = $this->send_reuqest($action, $param);
-		if($data){
-			return [
-				'RecordId' => $data['RecordInfo']['Id'],
-				'Domain' => $this->domain,
-				'Name' => $data['RecordInfo']['SubDomain'],
-				'Type' => $this->convertTypeId($data['RecordInfo']['RecordType']),
-				'Value' => $data['RecordInfo']['Value'],
-				'Line' => $data['RecordInfo']['RecordLineId'],
-				'TTL' => $data['RecordInfo']['TTL'],
-				'MX' => $data['RecordInfo']['MX'],
-				'Status' => $data['RecordInfo']['Enabled'] == 1 ? '1' : '0',
-				'Weight' => $data['RecordInfo']['Weight'],
-				'Remark' => $data['RecordInfo']['Remark'],
-				'UpdateTime' => $data['RecordInfo']['UpdatedOn'],
-			];
-		}
-		return false;
-	}
+    //获取解析记录详细信息
+    public function getDomainRecordInfo($RecordId)
+    {
+        $action = 'DescribeRecord';
+        $param = ['Domain' => $this->domain, 'RecordId' => intval($RecordId)];
+        $data = $this->send_request($action, $param);
+        if ($data) {
+            return [
+                'RecordId' => $data['RecordInfo']['Id'],
+                'Domain' => $this->domain,
+                'Name' => $data['RecordInfo']['SubDomain'],
+                'Type' => $this->convertTypeId($data['RecordInfo']['RecordType']),
+                'Value' => $data['RecordInfo']['Value'],
+                'Line' => $data['RecordInfo']['RecordLineId'],
+                'TTL' => $data['RecordInfo']['TTL'],
+                'MX' => $data['RecordInfo']['MX'],
+                'Status' => $data['RecordInfo']['Enabled'] == 1 ? '1' : '0',
+                'Weight' => $data['RecordInfo']['Weight'],
+                'Remark' => $data['RecordInfo']['Remark'],
+                'UpdateTime' => $data['RecordInfo']['UpdatedOn'],
+            ];
+        }
+        return false;
+    }
 
-	//添加解析记录
-	public function addDomainRecord($Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Remark = null){
-		$action = 'CreateRecord';
-		$param = ['Domain' => $this->domain, 'SubDomain' => $Name, 'RecordType' => $this->convertType($Type), 'Value' => $Value, 'RecordLine'=>$Line, 'RecordLineId' => $this->convertLineCode($Line), 'TTL' => intval($TTL)];
-		if($Type == 'MX')$param['MX'] = intval($MX);
-		$data = $this->send_reuqest($action, $param);
-		return is_array($data) ? $data['RecordId'] : false;
-	}
+    //添加解析记录
+    public function addDomainRecord($Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Weight = null, $Remark = null)
+    {
+        $action = 'CreateRecord';
+        $param = ['Domain' => $this->domain, 'SubDomain' => $Name, 'RecordType' => $this->convertType($Type), 'Value' => $Value, 'RecordLine' => $Line, 'RecordLineId' => $this->convertLineCode($Line), 'TTL' => intval($TTL), 'Weight' => $Weight];
+        if ($Type == 'MX') $param['MX'] = intval($MX);
+        $data = $this->send_request($action, $param);
+        return is_array($data) ? $data['RecordId'] : false;
+    }
 
-	//修改解析记录
-	public function updateDomainRecord($RecordId, $Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Remark = null){
-		$action = 'ModifyRecord';
-		$param = ['Domain' => $this->domain, 'RecordId' => intval($RecordId), 'SubDomain' => $Name, 'RecordType' => $this->convertType($Type), 'Value' => $Value, 'RecordLine'=>$Line, 'RecordLineId' => $this->convertLineCode($Line), 'TTL' => intval($TTL)];
-		if($Type == 'MX')$param['MX'] = intval($MX);
-		$data = $this->send_reuqest($action, $param);
-		return is_array($data);
-	}
+    //修改解析记录
+    public function updateDomainRecord($RecordId, $Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Weight = null, $Remark = null)
+    {
+        $action = 'ModifyRecord';
+        $param = ['Domain' => $this->domain, 'RecordId' => intval($RecordId), 'SubDomain' => $Name, 'RecordType' => $this->convertType($Type), 'Value' => $Value, 'RecordLine' => $Line, 'RecordLineId' => $this->convertLineCode($Line), 'TTL' => intval($TTL), 'Weight' => $Weight];
+        if ($Type == 'MX') $param['MX'] = intval($MX);
+        $data = $this->send_request($action, $param);
+        return is_array($data);
+    }
 
-	//修改解析记录备注
-	public function updateDomainRecordRemark($RecordId, $Remark){
-		$action = 'ModifyRecordRemark';
-		$param = ['Domain' => $this->domain, 'RecordId' => intval($RecordId), 'Remark' => $Remark];
-		$data = $this->send_reuqest($action, $param);
-		return is_array($data);
-	}
+    //修改解析记录备注
+    public function updateDomainRecordRemark($RecordId, $Remark)
+    {
+        $action = 'ModifyRecordRemark';
+        $param = ['Domain' => $this->domain, 'RecordId' => intval($RecordId), 'Remark' => $Remark];
+        $data = $this->send_request($action, $param);
+        return is_array($data);
+    }
 
-	//删除解析记录
-	public function deleteDomainRecord($RecordId){
-		$action = 'DeleteRecord';
-		$param = ['Domain' => $this->domain, 'RecordId' => intval($RecordId)];
-		$data = $this->send_reuqest($action, $param);
-		return is_array($data);
-	}
-	
-	//设置解析记录状态
-	public function setDomainRecordStatus($RecordId, $Status){
-		$Status = $Status == '1' ? 'ENABLE' : 'DISABLE';
-		$action = 'ModifyRecordStatus';
-		$param = ['Domain' => $this->domain, 'RecordId' => intval($RecordId), 'Status' => $Status];
-		$data = $this->send_reuqest($action, $param);
-		return is_array($data);
-	}
+    //删除解析记录
+    public function deleteDomainRecord($RecordId)
+    {
+        $action = 'DeleteRecord';
+        $param = ['Domain' => $this->domain, 'RecordId' => intval($RecordId)];
+        $data = $this->send_request($action, $param);
+        return is_array($data);
+    }
 
-	//获取解析记录操作日志
-	public function getDomainRecordLog($PageNumber = 1, $PageSize = 20, $KeyWord = null, $StartDate = null, $endDate = null){
-		$action = 'DescribeDomainLogList';
-		$offset = ($PageNumber-1)*$PageSize;
-		$param = ['Domain' => $this->domain, 'Offset' => $offset, 'Limit' => $PageSize];
-		$data = $this->send_reuqest($action, $param);
-		if($data){
-			$list = [];
-			foreach($data['LogList'] as $row){
-				$list[] = ['time'=>substr($row, 0, strpos($row,'(')), 'ip'=>substr($row, strpos($row,'(')+1, strpos($row,')')-strpos($row,'(')-1), 'data'=>substr($row, strpos($row,')')+1, strpos($row,' Uin:')-strpos($row,')')-1)];
-			}
-			return ['total' => $data['TotalCount'], 'list' => $list];
-		}
-		return false;
-	}
+    //设置解析记录状态
+    public function setDomainRecordStatus($RecordId, $Status)
+    {
+        $Status = $Status == '1' ? 'ENABLE' : 'DISABLE';
+        $action = 'ModifyRecordStatus';
+        $param = ['Domain' => $this->domain, 'RecordId' => intval($RecordId), 'Status' => $Status];
+        $data = $this->send_request($action, $param);
+        return is_array($data);
+    }
 
-	//获取解析线路列表
-	public function getRecordLine(){
-		$action = 'DescribeRecordLineCategoryList';
-		$param = ['Domain' => $this->domain];
-		$data = $this->send_reuqest($action, $param);
-		if($data){
-			$list = [];
-			$this->processLineList($list, $data['LineList'], null);
-			return $list;
-		}
-		return false;
-	}
+    //获取解析记录操作日志
+    public function getDomainRecordLog($PageNumber = 1, $PageSize = 20, $KeyWord = null, $StartDate = null, $endDate = null)
+    {
+        $action = 'DescribeDomainLogList';
+        $offset = ($PageNumber - 1) * $PageSize;
+        $param = ['Domain' => $this->domain, 'Offset' => $offset, 'Limit' => $PageSize];
+        $data = $this->send_request($action, $param);
+        if ($data) {
+            $list = [];
+            foreach ($data['LogList'] as $row) {
+                $list[] = ['time' => substr($row, 0, strpos($row, '(')), 'ip' => substr($row, strpos($row, '(') + 1, strpos($row, ')') - strpos($row, '(') - 1), 'data' => substr($row, strpos($row, ')') + 1, strpos($row, ' Uin:') - strpos($row, ')') - 1)];
+            }
+            return ['total' => $data['TotalCount'], 'list' => $list];
+        }
+        return false;
+    }
 
-	private function processLineList(&$list, $line_list, $parent){
-		foreach($line_list as $row){
-			if(!isNullOrEmpty($row['LineId']) && $row['Useful'] && !isset($list[$row['LineId']])){
-				$list[$row['LineId']] = ['name'=>$row['LineName'], 'parent'=>$parent];
-				if($row['SubGroup']){
-					$this->processLineList($list, $row['SubGroup'], $row['LineId']);
-				}
-			}
-		}
-	}
+    //获取解析线路列表
+    public function getRecordLine()
+    {
+        $action = 'DescribeRecordLineCategoryList';
+        $param = ['Domain' => $this->domain];
+        $data = $this->send_request($action, $param);
+        if ($data) {
+            $list = [];
+            $this->processLineList($list, $data['LineList'], null);
+            return $list;
+        } else {
+            $data = $this->getRecordLineByGrade();
+            if ($data) {
+                $list = [];
+                foreach ($data as $row) {
+                    $list[$row['LineId']] = ['name' => $row['Name'], 'parent' => null];
+                }
+                return $list;
+            }
+        }
+        return false;
+    }
 
-	//获取域名概览信息
-	public function getDomainInfo(){
-		$action = 'DescribeDomainPreview';
-		$param = ['Domain' => $this->domain];
-		$data = $this->send_reuqest($action, $param);
-		if($data){
-			return $data['Domain'];
-		}
-		return false;
-	}
+    private function processLineList(&$list, $line_list, $parent)
+    {
+        foreach ($line_list as $row) {
+            if (isNullOrEmpty($row['LineId'])) $row['LineId'] = 'N.' . $row['LineName'];
+            if ($row['Useful'] && !isset($list[$row['LineId']])) {
+                $list[$row['LineId']] = ['name' => $row['LineName'], 'parent' => $parent];
+                if ($row['SubGroup']) {
+                    $this->processLineList($list, $row['SubGroup'], $row['LineId']);
+                }
+            }
+        }
+    }
 
-	//获取域名权限
-	public function getDomainPurview(){
-		$action = 'DescribeDomainPurview';
-		$param = ['Domain' => $this->domain];
-		$data = $this->send_reuqest($action, $param);
-		if($data){
-			return $data['PurviewList'];
-		}
-		return false;
-	}
+    //获取域名概览信息
+    public function getDomainInfo()
+    {
+        $action = 'DescribeDomain';
+        $param = ['Domain' => $this->domain];
+        $data = $this->send_request($action, $param);
+        if ($data) {
+            $this->domainInfo = $data['DomainInfo'];
+            return $data['DomainInfo'];
+        }
+        return false;
+    }
 
-	//获取域名最低TTL
-	public function getMinTTL(){
-		$PurviewList = $this->getDomainPurview();
-		if($PurviewList){
-			foreach($PurviewList as $row){
-				if($row['Name'] == '记录 TTL 最低'){
-					return intval($row['Value']);
-				}
-			}
-		}
-		return false;
-	}
+    //获取域名权限
+    public function getDomainPurview()
+    {
+        $action = 'DescribeDomainPurview';
+        $param = ['Domain' => $this->domain];
+        $data = $this->send_request($action, $param);
+        if ($data) {
+            return $data['PurviewList'];
+        }
+        return false;
+    }
 
-	//获取用户信息
-	public function getAccountInfo(){
-		$action = 'DescribeUserDetail';
-		$param = [];
-		$data = $this->send_reuqest($action, $param);
-		if($data){
-			return $data['UserInfo'];
-		}
-		return false;
-	}
+    //获取域名最低TTL
+    public function getMinTTL()
+    {
+        if ($this->domainInfo) {
+            return $this->domainInfo['TTL'];
+        }
+        $PurviewList = $this->getDomainPurview();
+        if ($PurviewList) {
+            foreach ($PurviewList as $row) {
+                if ($row['Name'] == '记录 TTL 最低' || $row['Name'] == 'Min TTL value') {
+                    return intval($row['Value']);
+                }
+            }
+        }
+        return false;
+    }
 
-	private function convertLineCode($line){
-		$convert_dict = ['default'=>'0', 'unicom'=>'10=1', 'telecom'=>'10=0', 'mobile'=>'10=3', 'edu'=>'10=2', 'oversea'=>'3=0', 'btvn'=>'10=22', 'search'=>'80=0', 'internal'=>'7=0'];
-		if(array_key_exists($line, $convert_dict)){
-			return $convert_dict[$line];
-		}
-		return $line;
-	}
+    //获取等级允许的线路
+    public function getRecordLineByGrade()
+    {
+        $action = 'DescribeRecordLineList';
+        $param = ['Domain' => $this->domain, 'DomainGrade' => ''];
+        $data = $this->send_request($action, $param);
+        if ($data) {
+            $line_list = $data['LineList'];
+            if (!empty($data['LineGroupList'])) {
+                foreach ($data['LineGroupList'] as $row) {
+                    $line_list[] = ['Name' => $row['Name'], 'LineId' => $row['LineId']];
+                }
+            }
+            return $line_list;
+        }
+        return false;
+    }
 
-	private function convertType($type){
-		$convert_dict = ['REDIRECT_URL'=>'显性URL', 'FORWARD_URL'=>'隐性URL'];
-		if(array_key_exists($type, $convert_dict)){
-			return $convert_dict[$type];
-		}
-		return $type;
-	}
+    //获取用户信息
+    public function getAccountInfo()
+    {
+        $action = 'DescribeUserDetail';
+        $param = [];
+        $data = $this->send_request($action, $param);
+        if ($data) {
+            return $data['UserInfo'];
+        }
+        return false;
+    }
 
-	private function convertTypeId($type){
-		$convert_dict = ['显性URL'=>'REDIRECT_URL', '隐性URL'=>'FORWARD_URL'];
-		if(array_key_exists($type, $convert_dict)){
-			return $convert_dict[$type];
-		}
-		return $type;
-	}
+    private function convertLineCode($line)
+    {
+        $convert_dict = ['default' => '0', 'unicom' => '10=1', 'telecom' => '10=0', 'mobile' => '10=3', 'edu' => '10=2', 'oversea' => '3=0', 'btvn' => '10=22', 'search' => '80=0', 'internal' => '7=0'];
+        if (array_key_exists($line, $convert_dict)) {
+            return $convert_dict[$line];
+        }
+        return $line;
+    }
+
+    private function convertType($type)
+    {
+        $convert_dict = ['REDIRECT_URL' => '显性URL', 'FORWARD_URL' => '隐性URL'];
+        if (array_key_exists($type, $convert_dict)) {
+            return $convert_dict[$type];
+        }
+        return $type;
+    }
+
+    private function convertTypeId($type)
+    {
+        $convert_dict = ['显性URL' => 'REDIRECT_URL', '隐性URL' => 'FORWARD_URL'];
+        if (array_key_exists($type, $convert_dict)) {
+            return $convert_dict[$type];
+        }
+        return $type;
+    }
 
 
-	private function send_reuqest($action, $param){
-		$param = array_filter($param, function($a){ return $a!==null;});
-		if(!$param) $param = (object)[];
-		$payload = json_encode($param);
-		$time = time();
-		$authorization = $this->generateSign($payload, $time);
-		$header = [
-			'Authorization: '.$authorization,
-			'Content-Type: application/json; charset=utf-8',
-			'X-TC-Action: '.$action,
-			'X-TC-Timestamp: '.$time,
-			'X-TC-Version: '.$this->version,
-		];
-		return $this->curl_post($payload, $header);
-	}
+    private function send_request($action, $param)
+    {
+        try{
+            return $this->client->request($action, $param);
+        }catch(Exception $e){
+            $this->setError($e->getMessage());
+            return false;
+        }
+    }
 
-	private function generateSign($payload, $time){
-		$algorithm = "TC3-HMAC-SHA256";
-
-		// step 1: build canonical request string
-		$httpRequestMethod = "POST";
-		$canonicalUri = "/";
-		$canonicalQueryString = "";
-		$canonicalHeaders = "content-type:application/json; charset=utf-8\n"."host:".$this->endpoint."\n";
-		$signedHeaders = "content-type;host";
-		$hashedRequestPayload = hash("SHA256", $payload);
-		$canonicalRequest = $httpRequestMethod."\n"
-			.$canonicalUri."\n"
-			.$canonicalQueryString."\n"
-			.$canonicalHeaders."\n"
-			.$signedHeaders."\n"
-			.$hashedRequestPayload;
-		
-		// step 2: build string to sign
-		$date = gmdate("Y-m-d", $time);
-		$credentialScope = $date."/".$this->service."/tc3_request";
-		$hashedCanonicalRequest = hash("SHA256", $canonicalRequest);
-		$stringToSign = $algorithm."\n"
-			.$time."\n"
-			.$credentialScope."\n"
-			.$hashedCanonicalRequest;
-		
-		// step 3: sign string
-		$secretDate = hash_hmac("SHA256", $date, "TC3".$this->SecretKey, true);
-		$secretService = hash_hmac("SHA256", $this->service, $secretDate, true);
-		$secretSigning = hash_hmac("SHA256", "tc3_request", $secretService, true);
-		$signature = hash_hmac("SHA256", $stringToSign, $secretSigning);
-
-		// step 4: build authorization
-		$authorization = $algorithm
-			." Credential=".$this->SecretId."/".$credentialScope
-			.", SignedHeaders=content-type;host, Signature=".$signature;
-
-		return $authorization;
-	}
-
-	private function curl_post($payload, $header){
-		$url = 'https://'.$this->endpoint.'/';
-		$ch = curl_init($url);
-		curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
-		curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
-		curl_setopt($ch, CURLOPT_HTTPHEADER, $header);
-		curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
-		curl_setopt($ch, CURLOPT_TIMEOUT, 10);
-		curl_setopt($ch, CURLOPT_POST, 1);
-		curl_setopt($ch, CURLOPT_POSTFIELDS, $payload);
-		$response = curl_exec($ch);
-		$errno = curl_errno($ch);
-		if ($errno) {
-			$this->setError('Curl error: ' . curl_error($ch));
-		}
-		curl_close($ch);
-		if ($errno) return false;
-
-		$arr=json_decode($response,true);
-		if($arr){
-			if(isset($arr['Response']['Error'])){
-				$this->setError($arr['Response']['Error']['Message']);
-				return false;
-			}else{
-				return $arr['Response'];
-			}
-		}else{
-			$this->setError('返回数据解析失败');
-			return false;
-		}
-	}
-
-	private function setError($message){
-		$this->error = $message;
-		//file_put_contents('logs.txt',date('H:i:s').' '.$message."\r\n", FILE_APPEND);
-	}
-}
+    private function setError($message)
+    {
+        $this->error = $message;
+        //file_put_contents('logs.txt',date('H:i:s').' '.$message."\r\n", FILE_APPEND);
+    }
+}

app/lib/dns/huawei.php

@@ -1,350 +1,260 @@
 <?php
+
 namespace app\lib\dns;
 
 use app\lib\DnsInterface;
+use app\lib\client\HuaweiCloud;
+use Exception;
 
-class huawei implements DnsInterface {
-	private $AccessKeyId;
-	private $SecretAccessKey;
-	private $endpoint = "dns.myhuaweicloud.com";
-	private $error;
-	private $domain;
-	private $domainid;
+class huawei implements DnsInterface
+{
+    private $AccessKeyId;
+    private $SecretAccessKey;
+    private $endpoint = "dns.myhuaweicloud.com";
+    private $error;
+    private $domain;
+    private $domainid;
+    private HuaweiCloud $client;
 
-	function __construct($config){
-		$this->AccessKeyId = $config['ak'];
-		$this->SecretAccessKey = $config['sk'];
-		$this->domain = $config['domain'];
-		$this->domainid = $config['domainid'];
-	}
-
-	public function getError(){
-		return $this->error;
-	}
-
-	public function check(){
-		if($this->getDomainList() != false){
-			return true;
-		}
-		return false;
-	}
-
-	//获取域名列表
-	public function getDomainList($KeyWord=null, $PageNumber=1, $PageSize=20){
-		$offset = ($PageNumber-1)*$PageSize;
-		$query = ['offset' => $offset, 'limit' => $PageSize, 'name' => $KeyWord];
-		$data = $this->send_reuqest('GET', '/v2/zones', $query);
-		if($data){
-			$list = [];
-			foreach($data['zones'] as $row){
-				$list[] = [
-					'DomainId' => $row['id'],
-					'Domain' => rtrim($row['name'], '.'),
-					'RecordCount' => $row['record_num'],
-				];
-			}
-			return ['total' => $data['metadata']['total_count'], 'list' => $list];
-		}
-		return false;
-	}
-
-	//获取解析记录列表
-	public function getDomainRecords($PageNumber=1, $PageSize=20, $KeyWord = null, $SubDomain = null, $Type = null, $Line = null, $Status = null){
-		$offset = ($PageNumber-1)*$PageSize;
-		$query = ['type' => $Type, 'line_id' => $Line, 'name' => $KeyWord, 'status' => $Status, 'offset' => $offset, 'limit' => $PageSize];
-		if(!isNullOrEmpty(($SubDomain))){
-			$query['name'] = $SubDomain;
-			$query['search_mode'] = 'equal';
-		}
-		$data = $this->send_reuqest('GET', '/v2.1/zones/'.$this->domainid.'/recordsets', $query);
-		if($data){
-			$list = [];
-			foreach($data['recordsets'] as $row){
-				if($row['name'] == $row['zone_name']) $row['name'] = '@';
-				$list[] = [
-					'RecordId' => $row['id'],
-					'Domain' => rtrim($row['zone_name'], '.'),
-					'Name' => str_replace('.'.$row['zone_name'], '', $row['name']),
-					'Type' => $row['type'],
-					'Value' => $row['records'],
-					'Line' => $row['line'],
-					'TTL' => $row['ttl'],
-					'MX' => $row['weight'],
-					'Status' => $row['status'] == 'ACTIVE' ? '1' : '0',
-					'Weight' => $row['weight'],
-					'Remark' => $row['description'],
-					'UpdateTime' => $row['updated_at'],
-				];
-			}
-			return ['total' => $data['metadata']['total_count'], 'list' => $list];
-		}
-		return false;
-	}
-
-	//获取子域名解析记录列表
-	public function getSubDomainRecords($SubDomain, $PageNumber=1, $PageSize=20, $Type = null, $Line = null){
-		$SubDomain = $this->getHost($SubDomain);
-		return $this->getDomainRecords($PageNumber, $PageSize, null, $SubDomain, $Type, $Line);
-	}
-
-	//获取解析记录详细信息
-	public function getDomainRecordInfo($RecordId){
-		$data = $this->send_reuqest('GET', '/v2.1/zones/'.$this->domainid.'/recordsets/'.$RecordId);
-		if($data){
-			if($data['name'] == $data['zone_name']) $data['name'] = '@';
-			return [
-				'RecordId' => $data['id'],
-				'Domain' => rtrim($data['zone_name'], '.'),
-				'Name' => str_replace('.'.$data['zone_name'], '', $data['name']),
-				'Type' => $data['type'],
-				'Value' => $data['records'],
-				'Line' => $data['line'],
-				'TTL' => $data['ttl'],
-				'MX' => $data['weight'],
-				'Status' => $data['status'] == 'ACTIVE' ? '1' : '0',
-				'Weight' => $data['weight'],
-				'Remark' => $data['description'],
-				'UpdateTime' => $data['updated_at'],
-			];
-		}
-		return false;
-	}
-
-	//添加解析记录
-	public function addDomainRecord($Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Remark = null){
-		$Name = $this->getHost($Name);
-		$records = explode(',', $Value);
-		$params = ['name' => $Name, 'type' => $this->convertType($Type), 'records' => $records, 'line'=>$Line, 'ttl' => intval($TTL), 'description' => $Remark];
-		if($Type == 'MX')$param['weight'] = intval($MX);
-		$data = $this->send_reuqest('POST', '/v2.1/zones/'.$this->domainid.'/recordsets', null, $params);
-		return is_array($data) ? $data['id'] : false;
-	}
-
-	//修改解析记录
-	public function updateDomainRecord($RecordId, $Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Remark = null){
-		$Name = $this->getHost($Name);
-		$records = explode(',', $Value);
-		$params = ['name' => $Name, 'type' => $this->convertType($Type), 'records' => $records, 'line'=>$Line, 'ttl' => intval($TTL), 'description' => $Remark];
-		if($Type == 'MX')$param['weight'] = intval($MX);
-		$data = $this->send_reuqest('PUT', '/v2.1/zones/'.$this->domainid.'/recordsets/'.$RecordId, null, $params);
-		return is_array($data);
-	}
-
-	//修改解析记录备注
-	public function updateDomainRecordRemark($RecordId, $Remark){
-		return false;
-	}
-
-	//删除解析记录
-	public function deleteDomainRecord($RecordId){
-		$data = $this->send_reuqest('DELETE', '/v2.1/zones/'.$this->domainid.'/recordsets/'.$RecordId);
-		return is_array($data);
-	}
-	
-	//设置解析记录状态
-	public function setDomainRecordStatus($RecordId, $Status){
-		$Status = $Status == '1' ? 'ENABLE' : 'DISABLE';
-		$params = ['status' => $Status];
-		$data = $this->send_reuqest('PUT', '/v2.1/recordsets/'.$RecordId.'/statuses/set', null, $params);
-		return is_array($data);
-	}
-
-	//获取解析记录操作日志
-	public function getDomainRecordLog($PageNumber = 1, $PageSize = 20, $KeyWord = null, $StartDate = null, $endDate = null){
-		return false;
-	}
-
-	//获取解析线路列表
-	public function getRecordLine(){
-		$file_path = app()->getBasePath().'data'.DIRECTORY_SEPARATOR.'huawei_line.json';
-		$content = file_get_contents($file_path);
-		$data = json_decode($content, true);
-		if($data){
-			return $data;
-			$list = [$data['DEFAULT']['id'] => ['name'=>$data['DEFAULT']['zh'], 'parent'=>null]];
-			$this->processLineList($list, $data['ISP'], null, 1, 1);
-			$this->processLineList($list, $data['REGION'], null, null, 1);
-			//file_put_contents($file_path, json_encode($list, JSON_UNESCAPED_UNICODE));
-			return $list;
-		}
-		return false;
-	}
-
-	private function processLineList(&$list, $line_list, $parent, $rootId = null, $rootName = null){
-		foreach($line_list as $row){
-			if($rootId && $rootId!==1){
-				$row['id'] = $rootId.'_'.$row['id'];
-			}
-			if($rootName && $rootName!==1){
-				$row['zh'] = $rootName.'_'.$row['zh'];
-			}
-			$list[$row['id']] = ['name'=>$row['zh'], 'parent'=>$parent];
-			if(isset($row['children']) && !empty($row['children'])){
-				$this->processLineList($list, $row['children'], $row['id'], $rootId === 1 ? $row['id'] : $rootId, $rootName === 1 ? $row['zh'] : $rootName);
-			}
-		}
-	}
-
-	//获取域名概览信息
-	public function getDomainInfo(){
-		return $this->send_reuqest('GET', '/v2/zones/'.$this->domainid);
-	}
-
-	//获取域名最低TTL
-	public function getMinTTL(){
-		return false;
-	}
-
-	private function convertType($type){
-		return $type;
-	}
-
-	private function getHost($Name){
-		if($Name == '@') $Name = '';
-		else $Name .= '.';
-		$Name .= $this->domain . '.';
-		return $Name;
-	}
-
-	private function send_reuqest($method, $path, $query = null, $params = null){
-		if(!empty($query)){
-			$query = array_filter($query, function($a){ return $a!==null;});
-		}
-		if(!empty($params)){
-			$params = array_filter($params, function($a){ return $a!==null;});
-		}
-
-		$time = time();
-		$date = gmdate("Ymd\THis\Z", $time);
-		$body = !empty($params) ? json_encode($params) : '';
-		$headers = [
-			'Host' => $this->endpoint,
-			'X-Sdk-Date' => $date,
-		];
-		if($body){
-			$headers['Content-Type'] = 'application/json';
-		}
-		
-		$authorization = $this->generateSign($method, $path, $query, $headers, $body, $time);
-		$headers['Authorization'] = $authorization;
-
-		$url = 'https://'.$this->endpoint.$path;
-		if(!empty($query)){
-			$url .= '?'.http_build_query($query);
-		}
-		$header = [];
-		foreach($headers as $key => $value){
-			$header[] = $key.': '.$value;
-		}
-		return $this->curl($method, $url, $body, $header);
-	}
-
-	private function generateSign($method, $path, $query, $headers, $body, $time){
-		$algorithm = "SDK-HMAC-SHA256";
-
-		// step 1: build canonical request string
-		$httpRequestMethod = $method;
-		$canonicalUri = $path;
-		if(substr($canonicalUri, -1) != "/") $canonicalUri .= "/";
-		$canonicalQueryString = $this->getCanonicalQueryString($query);
-		[$canonicalHeaders, $signedHeaders] = $this->getCanonicalHeaders($headers);
-		$hashedRequestPayload = hash("sha256", $body);
-		$canonicalRequest = $httpRequestMethod."\n"
-			.$canonicalUri."\n"
-			.$canonicalQueryString."\n"
-			.$canonicalHeaders."\n"
-			.$signedHeaders."\n"
-			.$hashedRequestPayload;
-		
-		// step 2: build string to sign
-		$date = gmdate("Ymd\THis\Z", $time);
-		$hashedCanonicalRequest = hash("sha256", $canonicalRequest);
-		$stringToSign = $algorithm."\n"
-			.$date."\n"
-			.$hashedCanonicalRequest;
-		
-		// step 3: sign string
-		$signature = hash_hmac("sha256", $stringToSign, $this->SecretAccessKey);
-
-		// step 4: build authorization
-		$authorization = $algorithm . ' Access=' . $this->AccessKeyId . ", SignedHeaders=" . $signedHeaders . ", Signature=" . $signature;
-
-		return $authorization;
-	}
-
-	private function escape($str)
+    public function __construct($config)
     {
-        $search = ['+', '*', '%7E'];
-		$replace = ['%20', '%2A', '~'];
-		return str_replace($search, $replace, urlencode($str));
+        $this->AccessKeyId = $config['ak'];
+        $this->SecretAccessKey = $config['sk'];
+        $proxy = isset($config['proxy']) ? $config['proxy'] == 1 : false;
+        $this->client = new HuaweiCloud($this->AccessKeyId, $this->SecretAccessKey, $this->endpoint, $proxy);
+        $this->domain = $config['domain'];
+        $this->domainid = $config['domainid'];
     }
 
-	private function getCanonicalQueryString($parameters)
+    public function getError()
     {
-		if(empty($parameters)) return '';
-        ksort($parameters);
-		$canonicalQueryString = '';
-		foreach ($parameters as $key => $value) {
-			$canonicalQueryString .= '&' . $this->escape($key). '=' . $this->escape($value);
-		}
-        return substr($canonicalQueryString, 1);
+        return $this->error;
     }
 
-	private function getCanonicalHeaders($oldheaders){
-		$headers = array();
-        foreach ($oldheaders as $key => $value) {
-            $headers[strtolower($key)] = trim($value);
+    public function check()
+    {
+        if ($this->getDomainList() != false) {
+            return true;
         }
-		ksort($headers);
+        return false;
+    }
 
-		$canonicalHeaders = '';
-		$signedHeaders = '';
-		foreach ($headers as $key => $value) {
-			$canonicalHeaders .= $key . ':' . $value . "\n";
-			$signedHeaders .= $key . ';';
-		}
-		$signedHeaders = substr($signedHeaders, 0, -1);
-		return [$canonicalHeaders, $signedHeaders];
-	}
+    //获取域名列表
+    public function getDomainList($KeyWord = null, $PageNumber = 1, $PageSize = 20)
+    {
+        $offset = ($PageNumber - 1) * $PageSize;
+        $query = ['offset' => $offset, 'limit' => $PageSize, 'name' => $KeyWord];
+        $data = $this->send_request('GET', '/v2/zones', $query);
+        if ($data) {
+            $list = [];
+            foreach ($data['zones'] as $row) {
+                $list[] = [
+                    'DomainId' => $row['id'],
+                    'Domain' => rtrim($row['name'], '.'),
+                    'RecordCount' => $row['record_num'],
+                ];
+            }
+            return ['total' => $data['metadata']['total_count'], 'list' => $list];
+        }
+        return false;
+    }
 
-	private function curl($method, $url, $body, $header){
-		$ch = curl_init($url);
-		curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
-		curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
-		curl_setopt($ch, CURLOPT_HTTPHEADER, $header);
-		curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
-		curl_setopt($ch, CURLOPT_TIMEOUT, 10);
-		curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
-		if(!empty($body)){
-			curl_setopt($ch, CURLOPT_POSTFIELDS, $body);
-		}
-		$response = curl_exec($ch);
-		$errno = curl_errno($ch);
-		if ($errno) {
-			$this->setError('Curl error: ' . curl_error($ch));
-		}
-		curl_close($ch);
-		if ($errno) return false;
+    //获取解析记录列表
+    public function getDomainRecords($PageNumber = 1, $PageSize = 20, $KeyWord = null, $SubDomain = null, $Value = null, $Type = null, $Line = null, $Status = null)
+    {
+        $offset = ($PageNumber - 1) * $PageSize;
+        $query = ['type' => $Type, 'line_id' => $Line, 'name' => $KeyWord, 'offset' => $offset, 'limit' => $PageSize];
+        if (!isNullOrEmpty($Status)) {
+            $Status = $Status == '1' ? 'ACTIVE' : 'DISABLE';
+            $query['status'] = $Status;
+        }
+        if (!isNullOrEmpty($SubDomain)) {
+            $SubDomain = $this->getHost($SubDomain);
+            $query['name'] = $SubDomain;
+            $query['search_mode'] = 'equal';
+        }
+        $data = $this->send_request('GET', '/v2.1/zones/'.$this->domainid.'/recordsets', $query);
+        if ($data) {
+            $list = [];
+            foreach ($data['recordsets'] as $row) {
+                if ($row['name'] == $row['zone_name']) $row['name'] = '@';
+                if ($row['type'] == 'MX') list($row['mx'], $row['records']) = explode(' ', $row['records'][0]);
+                $list[] = [
+                    'RecordId' => $row['id'],
+                    'Domain' => rtrim($row['zone_name'], '.'),
+                    'Name' => str_replace('.'.$row['zone_name'], '', $row['name']),
+                    'Type' => $row['type'],
+                    'Value' => $row['records'],
+                    'Line' => $row['line'],
+                    'TTL' => $row['ttl'],
+                    'MX' => isset($row['mx']) ? $row['mx'] : null,
+                    'Status' => $row['status'] == 'ACTIVE' ? '1' : '0',
+                    'Weight' => $row['weight'],
+                    'Remark' => $row['description'],
+                    'UpdateTime' => $row['updated_at'],
+                ];
+            }
+            return ['total' => $data['metadata']['total_count'], 'list' => $list];
+        }
+        return false;
+    }
 
-		$arr=json_decode($response,true);
-		if($arr){
-			if(isset($arr['error_msg'])){
-				$this->setError($arr['error_msg']);
-				return false;
-			}elseif(isset($arr['message'])){
-				$this->setError($arr['message']);
-				return false;
-			}else{
-				return $arr;
-			}
-		}else{
-			$this->setError('返回数据解析失败');
-			return false;
-		}
-	}
+    //获取子域名解析记录列表
+    public function getSubDomainRecords($SubDomain, $PageNumber = 1, $PageSize = 20, $Type = null, $Line = null)
+    {
+        return $this->getDomainRecords($PageNumber, $PageSize, null, $SubDomain, null, $Type, $Line);
+    }
 
-	private function setError($message){
-		$this->error = $message;
-		//file_put_contents('logs.txt',date('H:i:s').' '.$message."\r\n", FILE_APPEND);
-	}
-}
+    //获取解析记录详细信息
+    public function getDomainRecordInfo($RecordId)
+    {
+        $data = $this->send_request('GET', '/v2.1/zones/'.$this->domainid.'/recordsets/'.$RecordId);
+        if ($data) {
+            if ($data['name'] == $data['zone_name']) $data['name'] = '@';
+            if ($data['type'] == 'MX') list($data['mx'], $data['records']) = explode(' ', $data['records'][0]);
+            return [
+                'RecordId' => $data['id'],
+                'Domain' => rtrim($data['zone_name'], '.'),
+                'Name' => str_replace('.'.$data['zone_name'], '', $data['name']),
+                'Type' => $data['type'],
+                'Value' => $data['records'],
+                'Line' => $data['line'],
+                'TTL' => $data['ttl'],
+                'MX' => isset($data['mx']) ? $data['mx'] : null,
+                'Status' => $data['status'] == 'ACTIVE' ? '1' : '0',
+                'Weight' => $data['weight'],
+                'Remark' => $data['description'],
+                'UpdateTime' => $data['updated_at'],
+            ];
+        }
+        return false;
+    }
+
+    //添加解析记录
+    public function addDomainRecord($Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Weight = null, $Remark = null)
+    {
+        $Name = $this->getHost($Name);
+        if ($Type == 'TXT' && substr($Value, 0, 1) != '"') $Value = '"' . $Value . '"';
+        $records = array_reverse(explode(',', $Value));
+        $params = ['name' => $Name, 'type' => $this->convertType($Type), 'records' => $records, 'line' => $Line, 'ttl' => intval($TTL), 'description' => $Remark];
+        if ($Type == 'MX') $params['records'][0] = intval($MX) . ' ' . $Value;
+        if ($Weight > 0) $params['weight'] = intval($Weight);
+        $data = $this->send_request('POST', '/v2.1/zones/'.$this->domainid.'/recordsets', null, $params);
+        return is_array($data) ? $data['id'] : false;
+    }
+
+    //修改解析记录
+    public function updateDomainRecord($RecordId, $Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Weight = null, $Remark = null)
+    {
+        $Name = $this->getHost($Name);
+        if ($Type == 'TXT' && substr($Value, 0, 1) != '"') $Value = '"' . $Value . '"';
+        $records = array_reverse(explode(',', $Value));
+        $params = ['name' => $Name, 'type' => $this->convertType($Type), 'records' => $records, 'line' => $Line, 'ttl' => intval($TTL), 'description' => $Remark];
+        if ($Type == 'MX') $params['records'][0] = intval($MX) . ' ' . $Value;
+        if ($Weight > 0) $params['weight'] = intval($Weight);
+        $data = $this->send_request('PUT', '/v2.1/zones/'.$this->domainid.'/recordsets/'.$RecordId, null, $params);
+        return is_array($data);
+    }
+
+    //修改解析记录备注
+    public function updateDomainRecordRemark($RecordId, $Remark)
+    {
+        return false;
+    }
+
+    //删除解析记录
+    public function deleteDomainRecord($RecordId)
+    {
+        $data = $this->send_request('DELETE', '/v2.1/zones/'.$this->domainid.'/recordsets/'.$RecordId);
+        return is_array($data);
+    }
+
+    //设置解析记录状态
+    public function setDomainRecordStatus($RecordId, $Status)
+    {
+        $Status = $Status == '1' ? 'ENABLE' : 'DISABLE';
+        $params = ['status' => $Status];
+        $data = $this->send_request('PUT', '/v2.1/recordsets/'.$RecordId.'/statuses/set', null, $params);
+        return is_array($data);
+    }
+
+    //获取解析记录操作日志
+    public function getDomainRecordLog($PageNumber = 1, $PageSize = 20, $KeyWord = null, $StartDate = null, $endDate = null)
+    {
+        return false;
+    }
+
+    //获取解析线路列表
+    public function getRecordLine()
+    {
+        $file_path = app()->getBasePath().'data'.DIRECTORY_SEPARATOR.'huawei_line.json';
+        $content = file_get_contents($file_path);
+        $data = json_decode($content, true);
+        if ($data) {
+            return $data;
+            $list = [$data['DEFAULT']['id'] => ['name' => $data['DEFAULT']['zh'], 'parent' => null]];
+            $this->processLineList($list, $data['ISP'], null, 1, 1);
+            $this->processLineList($list, $data['REGION'], null, null, 1);
+            //file_put_contents($file_path, json_encode($list, JSON_UNESCAPED_UNICODE));
+            return $list;
+        }
+        return false;
+    }
+
+    private function processLineList(&$list, $line_list, $parent, $rootId = null, $rootName = null)
+    {
+        foreach ($line_list as $row) {
+            if ($rootId && $rootId !== 1) {
+                $row['id'] = $rootId.'_'.$row['id'];
+            }
+            if ($rootName && $rootName !== 1) {
+                $row['zh'] = $rootName.'_'.$row['zh'];
+            }
+            $list[$row['id']] = ['name' => $row['zh'], 'parent' => $parent];
+            if (isset($row['children']) && !empty($row['children'])) {
+                $this->processLineList($list, $row['children'], $row['id'], $rootId === 1 ? $row['id'] : $rootId, $rootName === 1 ? $row['zh'] : $rootName);
+            }
+        }
+    }
+
+    //获取域名概览信息
+    public function getDomainInfo()
+    {
+        return $this->send_request('GET', '/v2/zones/'.$this->domainid);
+    }
+
+    //获取域名最低TTL
+    public function getMinTTL()
+    {
+        return false;
+    }
+
+    private function convertType($type)
+    {
+        return $type;
+    }
+
+    private function getHost($Name)
+    {
+        if ($Name == '@') $Name = '';
+        else $Name .= '.';
+        $Name .= $this->domain . '.';
+        return $Name;
+    }
+
+    private function send_request($method, $path, $query = null, $params = null)
+    {
+        try{
+            return $this->client->request($method, $path, $query, $params);
+        }catch(Exception $e){
+            $this->setError($e->getMessage());
+            return false;
+        }
+    }
+
+    private function setError($message)
+    {
+        $this->error = $message;
+        //file_put_contents('logs.txt',date('H:i:s').' '.$message."\r\n", FILE_APPEND);
+    }
+}

app/lib/dns/huoshan.php

@@ -0,0 +1,270 @@
+<?php
+
+namespace app\lib\dns;
+
+use app\lib\DnsInterface;
+use app\lib\client\Volcengine;
+use Exception;
+
+class huoshan implements DnsInterface
+{
+    private $AccessKeyId;
+    private $SecretAccessKey;
+    private $endpoint = "open.volcengineapi.com";
+    private $service = "DNS";
+    private $version = "2018-08-01";
+    private $region = "cn-north-1";
+    private $error;
+    private $domain;
+    private $domainid;
+    private $domainInfo;
+    private Volcengine $client;
+
+    private static $trade_code_list = [
+        'free_inner' => ['level' => 1, 'name' => '免费版', 'ttl' => 600],
+        'professional_inner' => ['level' => 2, 'name' => '专业版', 'ttl' => 300],
+        'enterprise_inner' => ['level' => 3, 'name' => '企业版', 'ttl' => 60],
+        'ultimate_inner' => ['level' => 4, 'name' => '旗舰版', 'ttl' => 1],
+        'ultimate_exclusive_inner' => ['level' => 5, 'name' => '尊享版', 'ttl' => 1],
+    ];
+
+    public function __construct($config)
+    {
+        $this->AccessKeyId = $config['ak'];
+        $this->SecretAccessKey = $config['sk'];
+        $proxy = isset($config['proxy']) ? $config['proxy'] == 1 : false;
+        $this->client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, $this->endpoint, $this->service, $this->version, $this->region, $proxy);
+        $this->domain = $config['domain'];
+        $this->domainid = $config['domainid'];
+    }
+
+    public function getError()
+    {
+        return $this->error;
+    }
+
+    public function check()
+    {
+        if ($this->getDomainList() != false) {
+            return true;
+        }
+        return false;
+    }
+
+    //获取域名列表
+    public function getDomainList($KeyWord = null, $PageNumber = 1, $PageSize = 20)
+    {
+        $query = ['PageNumber' => $PageNumber, 'PageSize' => $PageSize, 'Key' => $KeyWord];
+        $data = $this->send_request('GET', 'ListZones', $query);
+        if ($data) {
+            $list = [];
+            if (!empty($data['Zones'])) {
+                foreach ($data['Zones'] as $row) {
+                    $list[] = [
+                        'DomainId' => $row['ZID'],
+                        'Domain' => $row['ZoneName'],
+                        'RecordCount' => $row['RecordCount'],
+                    ];
+                }
+            }
+            return ['total' => $data['Total'], 'list' => $list];
+        }
+        return false;
+    }
+
+    //获取解析记录列表
+    public function getDomainRecords($PageNumber = 1, $PageSize = 20, $KeyWord = null, $SubDomain = null, $Value = null, $Type = null, $Line = null, $Status = null)
+    {
+        $query = ['ZID' => intval($this->domainid), 'PageNumber' => $PageNumber, 'PageSize' => $PageSize, 'SearchOrder' => 'desc'];
+        if (!empty($SubDomain) || !empty($Type) || !empty($Line) || !empty($Value)) {
+            $query += ['Host' => $SubDomain, 'Value' => $Value, 'Type' => $Type, 'Line' => $Line];
+        } elseif (!empty($KeyWord)) {
+            $query += ['Host' => $KeyWord];
+        }
+        $data = $this->send_request('GET', 'ListRecords', $query);
+        if ($data) {
+            $list = [];
+            foreach ($data['Records'] as $row) {
+                if ($row['Type'] == 'MX') list($row['MX'], $row['Value']) = explode(' ', $row['Value']);
+                $list[] = [
+                    'RecordId' => $row['RecordID'],
+                    'Domain' => $this->domain,
+                    'Name' => $row['Host'],
+                    'Type' => $row['Type'],
+                    'Value' => $row['Value'],
+                    'Line' => $row['Line'],
+                    'TTL' => $row['TTL'],
+                    'MX' => isset($row['MX']) ? $row['MX'] : null,
+                    'Status' => $row['Enable'] ? '1' : '0',
+                    'Weight' => $row['Weight'],
+                    'Remark' => $row['Remark'],
+                    'UpdateTime' => $row['UpdatedAt'],
+                ];
+            }
+            return ['total' => $data['TotalCount'], 'list' => $list];
+        }
+        return false;
+    }
+
+    //获取子域名解析记录列表
+    public function getSubDomainRecords($SubDomain, $PageNumber = 1, $PageSize = 20, $Type = null, $Line = null)
+    {
+        return $this->getDomainRecords($PageNumber, $PageSize, null, $SubDomain, null, $Type, $Line);
+    }
+
+    //获取解析记录详细信息
+    public function getDomainRecordInfo($RecordId)
+    {
+        $data = $this->send_request('GET', 'QueryRecord', ['RecordID' => $RecordId]);
+        if ($data) {
+            if ($data['name'] == $data['zone_name']) $data['name'] = '@';
+            if ($data['Type'] == 'MX') list($data['MX'], $data['Value']) = explode(' ', $data['Value']);
+            return [
+                'RecordId' => $data['RecordID'],
+                'Domain' => $this->domain,
+                'Name' => $data['Host'],
+                'Type' => $data['Type'],
+                'Value' => $data['Value'],
+                'Line' => $data['Line'],
+                'TTL' => $data['TTL'],
+                'MX' => isset($data['MX']) ? $data['MX'] : null,
+                'Status' => $data['Enable'] ? '1' : '0',
+                'Weight' => $data['Weight'],
+                'Remark' => $data['Remark'],
+                'UpdateTime' => $data['UpdatedAt'],
+            ];
+        }
+        return false;
+    }
+
+    //添加解析记录
+    public function addDomainRecord($Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Weight = null, $Remark = null)
+    {
+        $params = ['ZID' => intval($this->domainid), 'Host' => $Name, 'Type' => $this->convertType($Type), 'Value' => $Value, 'Line' => $Line, 'TTL' => intval($TTL), 'Remark' => $Remark];
+        if ($Type == 'MX') $params['Value'] = intval($MX) . ' ' . $Value;
+        if ($Weight > 0) $params['Weight'] = $Weight;
+        $data = $this->send_request('POST', 'CreateRecord', $params);
+        return is_array($data) ? $data['RecordID'] : false;
+    }
+
+    //修改解析记录
+    public function updateDomainRecord($RecordId, $Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Weight = null, $Remark = null)
+    {
+        $params = ['RecordID' => $RecordId, 'Host' => $Name, 'Type' => $this->convertType($Type), 'Value' => $Value, 'Line' => $Line, 'TTL' => intval($TTL), 'Remark' => $Remark];
+        if ($Type == 'MX') $params['Value'] = intval($MX) . ' ' . $Value;
+        if ($Weight > 0) $params['Weight'] = $Weight;
+        $data = $this->send_request('POST', 'UpdateRecord', $params);
+        return is_array($data);
+    }
+
+    //修改解析记录备注
+    public function updateDomainRecordRemark($RecordId, $Remark)
+    {
+        return false;
+    }
+
+    //删除解析记录
+    public function deleteDomainRecord($RecordId)
+    {
+        $data = $this->send_request('POST', 'DeleteRecord', ['RecordID' => $RecordId]);
+        return $data;
+    }
+
+    //设置解析记录状态
+    public function setDomainRecordStatus($RecordId, $Status)
+    {
+        $params = ['RecordID' => $RecordId, 'Enable' => $Status == '1'];
+        $data = $this->send_request('POST', 'UpdateRecordStatus', $params);
+        return is_array($data);
+    }
+
+    //获取解析记录操作日志
+    public function getDomainRecordLog($PageNumber = 1, $PageSize = 20, $KeyWord = null, $StartDate = null, $endDate = null)
+    {
+        return false;
+    }
+
+    //获取解析线路列表
+    public function getRecordLine()
+    {
+        $domainInfo = $this->getDomainInfo();
+        if (!$domainInfo) return false;
+        $level = $this->getTradeInfo($domainInfo['TradeCode'])['level'];
+        $data = $this->send_request('GET', 'ListLines', []);
+        if ($data) {
+            $list = [];
+            $list['default'] = ['name' => '默认', 'parent' => null];
+            foreach ($data['Lines'] as $row) {
+                if ($row['Value'] == 'default') continue;
+                if ($row['Level'] > $level) continue;
+                $list[$row['Value']] = ['name' => $row['Name'], 'parent' => isset($row['FatherValue']) ? $row['FatherValue'] : null];
+            }
+
+            $data = $this->send_request('GET', 'ListCustomLines', []);
+            if ($data && $data['TotalCount'] > 0) {
+                $list['N.customer_lines'] = ['name' => '自定义线路', 'parent' => null];
+                foreach ($data['CustomerLines'] as $row) {
+                    $list[$row['Line']] = ['name' => $row['NameCN'], 'parent' => 'N.customer_lines'];
+                }
+            }
+
+            return $list;
+        }
+        return false;
+    }
+
+    //获取域名概览信息
+    public function getDomainInfo()
+    {
+        if (!empty($this->domainInfo)) return $this->domainInfo;
+        $query = ['ZID' => intval($this->domainid)];
+        $data = $this->send_request('GET', 'QueryZone', $query);
+        if ($data) {
+            $this->domainInfo = $data;
+            return $data;
+        }
+        return false;
+    }
+
+    //获取域名最低TTL
+    public function getMinTTL()
+    {
+        $domainInfo = $this->getDomainInfo();
+        if ($domainInfo) {
+            $ttl = $this->getTradeInfo($domainInfo['TradeCode'])['ttl'];
+            return $ttl;
+        }
+        return false;
+    }
+
+    private function convertType($type)
+    {
+        return $type;
+    }
+
+    private function getTradeInfo($trade_code)
+    {
+        if (array_key_exists($trade_code, self::$trade_code_list)) {
+            $trade_code = $trade_code;
+        } else {
+            $trade_code = 'free_inner';
+        }
+        return self::$trade_code_list[$trade_code];
+    }
+
+    private function send_request($method, $action, $params = [])
+    {
+        try{
+            return $this->client->request($method, $action, $params);
+        }catch(Exception $e){
+            $this->setError($e->getMessage());
+            return false;
+        }
+    }
+
+    private function setError($message)
+    {
+        $this->error = $message;
+        //file_put_contents('logs.txt',date('H:i:s').' '.$message."\r\n", FILE_APPEND);
+    }
+}

app/lib/dns/namesilo.php

@@ -0,0 +1,223 @@
+<?php
+
+namespace app\lib\dns;
+
+use app\lib\DnsInterface;
+use Exception;
+
+class namesilo implements DnsInterface
+{
+    private $apikey;
+    private $baseUrl = 'https://www.namesilo.com/api/';
+    private $version = '1';
+    private $error;
+    private $domain;
+    private $proxy;
+
+    function __construct($config)
+    {
+        $this->apikey = $config['sk'];
+        $this->domain = $config['domain'];
+        $this->proxy = isset($config['proxy']) ? $config['proxy'] == 1 : false;
+    }
+
+    public function getError()
+    {
+        return $this->error;
+    }
+
+    public function check()
+    {
+        if ($this->getDomainList() !== false) {
+            return true;
+        }
+        return false;
+    }
+
+    //获取域名列表
+    public function getDomainList($KeyWord = null, $PageNumber = 1, $PageSize = 20)
+    {
+        $param = ['page' => $PageNumber, 'pageSize' => $PageSize];
+        $data = $this->send_reuqest('listDomains', $param);
+        if ($data) {
+            $list = [];
+            if($data['domains']){
+                foreach ($data['domains'] as $row) {
+                    $list[] = [
+                        'DomainId' => $row['domain'],
+                        'Domain' => $row['domain'],
+                        'RecordCount' => 0,
+                    ];
+                }
+            }
+            return ['total' => $data['pager']['total'], 'list' => $list];
+        }
+        return false;
+    }
+
+    //获取解析记录列表
+    public function getDomainRecords($PageNumber = 1, $PageSize = 20, $KeyWord = null, $SubDomain = null, $Value = null, $Type = null, $Line = null, $Status = null)
+    {
+        $param = ['domain' => $this->domain];
+        $data = $this->send_reuqest('dnsListRecords', $param);
+        if ($data) {
+            $list = [];
+            foreach ($data['resource_record'] as $row) {
+                $name = $row['host'] == $this->domain ? '@' : str_replace('.'.$this->domain, '', $row['host']);
+                $list[] = [
+                    'RecordId' => $row['record_id'],
+                    'Domain' => $this->domain,
+                    'Name' => $name,
+                    'Type' => $row['type'],
+                    'Value' => $row['value'],
+                    'Line' => 'default',
+                    'TTL' => $row['ttl'],
+                    'MX' => isset($row['distance']) ? $row['distance'] : null,
+                    'Status' => '1',
+                    'Weight' => null,
+                    'Remark' => null,
+                    'UpdateTime' => null,
+                ];
+            }
+            if(!isNullOrEmpty($SubDomain)){
+                $list = array_values(array_filter($list, function($v) use ($SubDomain){
+                    return $v['Name'] == $SubDomain;
+                }));
+            }else{
+                if(!isNullOrEmpty($KeyWord)){
+                    $list = array_values(array_filter($list, function($v) use ($KeyWord){
+                        return strpos($v['Name'], $KeyWord) !== false || strpos($v['Value'], $KeyWord) !== false;
+                    }));
+                }
+                if(!isNullOrEmpty($Value)){
+                    $list = array_values(array_filter($list, function($v) use ($Value){
+                        return $v['Value'] == $Value;
+                    }));
+                }
+                if(!isNullOrEmpty($Type)){
+                    $list = array_values(array_filter($list, function($v) use ($Type){
+                        return $v['Type'] == $Type;
+                    }));
+                }
+            }
+            return ['total' => count($data['resource_record']), 'list' => $list];
+        }
+        return false;
+    }
+
+    //获取子域名解析记录列表
+    public function getSubDomainRecords($SubDomain, $PageNumber = 1, $PageSize = 20, $Type = null, $Line = null)
+    {
+        return $this->getDomainRecords($PageNumber, $PageSize, null, $SubDomain, null, $Type, $Line);
+    }
+
+    //获取解析记录详细信息
+    public function getDomainRecordInfo($RecordId)
+    {
+        return false;
+    }
+
+    //添加解析记录
+    public function addDomainRecord($Name, $Type, $Value, $Line = 'default', $TTL = 600, $MX = 1, $Weight = null, $Remark = null)
+    {
+        $param = ['domain' => $this->domain, 'rrtype' => $Type, 'rrhost' => $Name, 'rrvalue' => $Value, 'rrttl' => $TTL];
+        if ($Type == 'MX') $param['rrdistance'] = intval($MX);
+        $data = $this->send_reuqest('dnsAddRecord', $param);
+        return is_array($data) ? $data['record_id'] : false;
+    }
+
+    //修改解析记录
+    public function updateDomainRecord($RecordId, $Name, $Type, $Value, $Line = 'default', $TTL = 600, $MX = 1, $Weight = null, $Remark = null)
+    {
+        $param = ['domain' => $this->domain, 'rrid' => $RecordId, 'rrtype' => $Type, 'rrhost' => $Name, 'rrvalue' => $Value, 'rrttl' => $TTL];
+        if ($Type == 'MX') $param['rrdistance'] = intval($MX);
+        $data = $this->send_reuqest('dnsUpdateRecord', $param);
+        return is_array($data);
+    }
+
+    //修改解析记录备注
+    public function updateDomainRecordRemark($RecordId, $Remark)
+    {
+        return false;
+    }
+
+    //删除解析记录
+    public function deleteDomainRecord($RecordId)
+    {
+        $param = ['domain' => $this->domain, 'rrid' => $RecordId];
+        $data = $this->send_reuqest('dnsDeleteRecord', $param);
+        return is_array($data);
+    }
+
+    //设置解析记录状态
+    public function setDomainRecordStatus($RecordId, $Status)
+    {
+        return false;
+    }
+
+    //获取解析记录操作日志
+    public function getDomainRecordLog($PageNumber = 1, $PageSize = 20, $KeyWord = null, $StartDate = null, $endDate = null)
+    {
+        return false;
+    }
+
+    //获取解析线路列表
+    public function getRecordLine()
+    {
+        return ['default' => ['name' => '默认', 'parent' => null]];
+    }
+
+    //获取域名信息
+    public function getDomainInfo()
+    {
+        return false;
+    }
+
+    //获取域名最低TTL
+    public function getMinTTL()
+    {
+        return false;
+    }
+
+    private function send_reuqest($operation, $param = null)
+    {
+        $url = $this->baseUrl . $operation;
+
+        $params = [
+            'version' => $this->version,
+            'type' => 'json',
+            'key' => $this->apikey,
+        ];
+        if($param){
+            $params = array_merge($params, $param);
+        }
+
+        $url .= '?' . http_build_query($params);
+
+        try{
+            $response = curl_client($url, null, null, null, null, $this->proxy);
+        }catch(Exception $e){
+            $this->setError($e->getMessage());
+            return false;
+        }
+
+        $arr = json_decode($response['body'], true);
+        if (isset($arr['reply']['code'])) {
+            if ($arr['reply']['code'] == 300) {
+                return $arr['reply'];
+            } else {
+                $this->setError(isset($arr['reply']['detail']) ? $arr['reply']['detail'] : '未知错误');
+                return false;
+            }
+        } else {
+            $this->setError($response['body']);
+            return false;
+        }
+    }
+
+    private function setError($message)
+    {
+        $this->error = $message;
+        //file_put_contents('logs.txt',date('H:i:s').' '.$message."\r\n", FILE_APPEND);
+    }
+}

app/lib/dns/powerdns.php

@@ -0,0 +1,409 @@
+<?php
+
+namespace app\lib\dns;
+
+use app\lib\DnsInterface;
+use Exception;
+
+class powerdns implements DnsInterface
+{
+    private $url;
+    private $apikey;
+    private $server_id = 'localhost';
+    private $error;
+    private $domain;
+    private $domainid;
+    private $proxy;
+
+    function __construct($config)
+    {
+        $this->url = 'http://' . $config['ak'] . ':' . $config['sk'] . '/api/v1';
+        $this->apikey = $config['ext'];
+        $this->proxy = isset($config['proxy']) ? $config['proxy'] == 1 : false;
+        $this->domain = $config['domain'];
+        $this->domainid = $config['domainid'];
+    }
+
+    public function getError()
+    {
+        return $this->error;
+    }
+
+    public function check()
+    {
+        if ($this->getDomainList() !== false) {
+            return true;
+        }
+        return false;
+    }
+
+    //获取域名列表
+    public function getDomainList($KeyWord = null, $PageNumber = 1, $PageSize = 20)
+    {
+        $data = $this->send_reuqest('GET', '/servers/' . $this->server_id . '/zones');
+        if ($data) {
+            $list = [];
+            foreach ($data as $row) {
+                $list[] = [
+                    'DomainId' => $row['id'],
+                    'Domain' => rtrim($row['name'], '.'),
+                    'RecordCount' => 0,
+                ];
+            }
+            return ['total' => count($list), 'list' => $list];
+        }
+        return false;
+    }
+
+    //获取解析记录列表
+    public function getDomainRecords($PageNumber = 1, $PageSize = 20, $KeyWord = null, $SubDomain = null, $Value = null, $Type = null, $Line = null, $Status = null)
+    {
+        $data = $this->send_reuqest('GET', '/servers/' . $this->server_id . '/zones/' . $this->domainid);
+        if ($data) {
+            $list = [];
+            $rrset_id = 0;
+            foreach ($data['rrsets'] as &$row) {
+                $rrset_id++;
+                $name = $row['name'] == $this->domainid ? '@' : str_replace('.' . $this->domainid, '', $row['name']);
+                $row['host'] = $name;
+                $row['id'] = $rrset_id;
+                $record_id = 0;
+                foreach ($row['records'] as &$record) {
+                    $record_id++;
+                    $record['id'] = $record_id;
+                    $remark = !empty($row['comments']) ? $row['comments'][0]['content'] : null;
+                    $value = $record['content'];
+                    if ($row['type'] == 'MX') list($record['mx'], $value) = explode(' ', $record['content']);
+                    $list[] = [
+                        'RecordId' => $rrset_id . '_' . $record_id,
+                        'Domain' => $this->domain,
+                        'Name' => $name,
+                        'Type' => $row['type'],
+                        'Value' => $value,
+                        'Line' => 'default',
+                        'TTL' => $row['ttl'],
+                        'MX' => isset($record['mx']) ? $record['mx'] : null,
+                        'Status' => $record['disabled'] ? '0' : '1',
+                        'Weight' => null,
+                        'Remark' => $remark,
+                        'UpdateTime' => null,
+                    ];
+                }
+            }
+            cache('powerdns_' . $this->domainid, $data['rrsets'], 86400);
+            if (!isNullOrEmpty($SubDomain)) {
+                $list = array_values(array_filter($list, function ($v) use ($SubDomain) {
+                    return $v['Name'] == $SubDomain;
+                }));
+            } else {
+                if (!isNullOrEmpty($KeyWord)) {
+                    $list = array_values(array_filter($list, function ($v) use ($KeyWord) {
+                        return strpos($v['Name'], $KeyWord) !== false || strpos($v['Value'], $KeyWord) !== false;
+                    }));
+                }
+                if (!isNullOrEmpty($Value)) {
+                    $list = array_values(array_filter($list, function ($v) use ($Value) {
+                        return $v['Value'] == $Value;
+                    }));
+                }
+                if (!isNullOrEmpty($Type)) {
+                    $list = array_values(array_filter($list, function ($v) use ($Type) {
+                        return $v['Type'] == $Type;
+                    }));
+                }
+                if (!isNullOrEmpty($Status)) {
+                    $list = array_values(array_filter($list, function ($v) use ($Status) {
+                        return $v['Status'] == $Status;
+                    }));
+                }
+            }
+            return ['total' => count($list), 'list' => $list];
+        }
+        return false;
+    }
+
+    //获取子域名解析记录列表
+    public function getSubDomainRecords($SubDomain, $PageNumber = 1, $PageSize = 20, $Type = null, $Line = null)
+    {
+        return $this->getDomainRecords($PageNumber, $PageSize, null, $SubDomain, null, $Type, $Line);
+    }
+
+    //获取解析记录详细信息
+    public function getDomainRecordInfo($RecordId)
+    {
+        return false;
+    }
+
+    //添加解析记录
+    public function addDomainRecord($Name, $Type, $Value, $Line = 'default', $TTL = 600, $MX = 1, $Weight = null, $Remark = null)
+    {
+        if ($Type == 'TXT' && substr($Value, 0, 1) != '"') $Value = '"' . $Value . '"';
+        if ($Type == 'CNAME' && substr($Value, -1) != '.') $Value .= '.';
+        if ($Type == 'MX') $Value = intval($MX) . ' ' . $Value;
+        $records = [];
+        $rrsets = cache('powerdns_' . $this->domainid);
+        if ($rrsets) {
+            $rrsets_filter = array_filter($rrsets, function ($row) use ($Name, $Type) {
+                return $row['host'] == $Name && $row['type'] == $Type;
+            });
+            if (!empty($rrsets_filter)) {
+                $rrset = $rrsets_filter[array_key_first($rrsets_filter)];
+                $records = $rrset['records'];
+                $records_filter = array_filter($records, function ($record) use ($Value) {
+                    return $record['content'] == $Value;
+                });
+                if (!empty($records_filter)) {
+                    $this->setError('已存在相同记录');
+                    return false;
+                }
+            }
+        }
+        $records[] = ['content' => $Value, 'disabled' => false];
+        return $this->rrset_replace($Name, $Type, $TTL, $records, $Remark);
+    }
+
+    //修改解析记录
+    public function updateDomainRecord($RecordId, $Name, $Type, $Value, $Line = 'default', $TTL = 600, $MX = 1, $Weight = null, $Remark = null)
+    {
+        if ($Type == 'TXT' && substr($Value, 0, 1) != '"') $Value = '"' . $Value . '"';
+        if ($Type == 'CNAME' && substr($Value, -1) != '.') $Value .= '.';
+        if ($Type == 'MX') $Value = intval($MX) . ' ' . $Value;
+        $rrsets = cache('powerdns_' . $this->domainid);
+        $add = false;
+        $res = false;
+        if ($rrsets) {
+            [$rrset_id, $record_id] = explode('_', $RecordId);
+            $exist = false;
+            foreach ($rrsets as &$rrset) {
+                if ($rrset['id'] == $rrset_id) {
+                    $records = $rrset['records'];
+                    $records_filter = array_filter($records, function ($record) use ($Value, $record_id) {
+                        return $record['content'] == $Value && $record['id'] != $record_id;
+                    });
+                    if (!empty($records_filter)) {
+                        $this->setError('已存在相同记录');
+                        return false;
+                    }
+                    foreach ($records as $i => &$record) {
+                        if ($record['id'] == $record_id) {
+                            $exist = true;
+                            if ($rrset['host'] == $Name && $rrset['type'] == $Type) {
+                                $record['content'] = $Value;
+                            } else {
+                                unset($records[$i]);
+                                $add = true;
+                            }
+                            break;
+                        }
+                    }
+                    if (!$exist) break;
+                    $records = array_values($records);
+                    if (!empty($records)) {
+                        $res = $this->rrset_replace($rrset['host'], $rrset['type'], $TTL, $records, $Remark);
+                    } else {
+                        $res = $this->rrset_delete($rrset['host'], $rrset['type']);
+                    }
+                    $rrset['records'] = $records;
+                    break;
+                }
+            }
+            if (!$exist) {
+                $this->setError('记录不存在，请刷新页面重试');
+                return false;
+            }
+            cache('powerdns_' . $this->domainid, $rrsets, 86400);
+            if ($res && $add) {
+                $res = $this->addDomainRecord($Name, $Type, $Value, $Line, $TTL, $MX, $Weight, $Remark);
+            }
+            return $res;
+        } else {
+            $records[] = ['content' => $Value, 'disabled' => false];
+            return $this->addDomainRecord($Name, $Type, $Value, $Line, $TTL, $MX, $Weight, $Remark);
+        }
+    }
+
+    //修改解析记录备注
+    public function updateDomainRecordRemark($RecordId, $Remark)
+    {
+        return false;
+    }
+
+    //删除解析记录
+    public function deleteDomainRecord($RecordId)
+    {
+        $rrsets = cache('powerdns_' . $this->domainid);
+        if (!$rrsets) {
+            $this->setError('记录不存在，请刷新页面重试');
+            return false;
+        }
+        [$rrset_id, $record_id] = explode('_', $RecordId);
+        $exist = false;
+        $res = false;
+        foreach ($rrsets as &$rrset) {
+            if ($rrset['id'] == $rrset_id) {
+                $records = $rrset['records'];
+                foreach ($records as $i => &$record) {
+                    if ($record['id'] == $record_id) {
+                        $exist = true;
+                        unset($records[$i]);
+                        break;
+                    }
+                }
+                if (!$exist) break;
+                $records = array_values($records);
+                if (!empty($records)) {
+                    $res = $this->rrset_replace($rrset['host'], $rrset['type'], $rrset['ttl'], $records);
+                } else {
+                    $res = $this->rrset_delete($rrset['host'], $rrset['type']);
+                }
+                $rrset['records'] = $records;
+                break;
+            }
+        }
+        if (!$exist) {
+            $this->setError('记录不存在，请刷新页面重试');
+            return false;
+        }
+        cache('powerdns_' . $this->domainid, $rrsets, 86400);
+        return $res;
+    }
+
+    //设置解析记录状态
+    public function setDomainRecordStatus($RecordId, $Status)
+    {
+        $rrsets = cache('powerdns_' . $this->domainid);
+        if (!$rrsets) {
+            $this->setError('记录不存在，请刷新页面重试');
+            return false;
+        }
+        [$rrset_id, $record_id] = explode('_', $RecordId);
+        $exist = false;
+        $res = false;
+        foreach ($rrsets as &$rrset) {
+            if ($rrset['id'] == $rrset_id) {
+                $records = $rrset['records'];
+                foreach ($records as &$record) {
+                    if ($record['id'] == $record_id) {
+                        $exist = true;
+                        $record['disabled'] = $Status == '0';
+                        break;
+                    }
+                }
+                if (!$exist) break;
+                $res = $this->rrset_replace($rrset['host'], $rrset['type'], $rrset['ttl'], $records);
+                $rrset['records'] = $records;
+                break;
+            }
+        }
+        if (!$exist) {
+            $this->setError('记录不存在，请刷新页面重试');
+            return false;
+        }
+        cache('powerdns_' . $this->domainid, $rrsets, 86400);
+        return $res;
+    }
+
+    //获取解析记录操作日志
+    public function getDomainRecordLog($PageNumber = 1, $PageSize = 20, $KeyWord = null, $StartDate = null, $endDate = null)
+    {
+        return false;
+    }
+
+    //获取解析线路列表
+    public function getRecordLine()
+    {
+        return ['default' => ['name' => '默认', 'parent' => null]];
+    }
+
+    //获取域名信息
+    public function getDomainInfo()
+    {
+        return false;
+    }
+
+    //获取域名最低TTL
+    public function getMinTTL()
+    {
+        return false;
+    }
+
+    private function rrset_replace($host, $type, $ttl, $records, $remark = null)
+    {
+        $name = $host == '@' ? $this->domainid : $host . '.' . $this->domainid;
+        $rrset = [
+            'name' => $name,
+            'type' => $type,
+            'ttl' => intval($ttl),
+            'changetype' => 'REPLACE',
+            'records' => $records,
+            'comments' => [],
+        ];
+        if (!empty($remark)) {
+            $rrset['comments'] = [
+                ['account' => '', 'content' => $remark]
+            ];
+        }
+        $param = [
+            'rrsets' => [
+                $rrset
+            ],
+        ];
+        return $this->send_reuqest('PATCH', '/servers/' . $this->server_id . '/zones/' . $this->domainid, $param);
+    }
+
+    private function rrset_delete($host, $type)
+    {
+        $name = $host == '@' ? $this->domainid : $host . '.' . $this->domainid;
+        $param = [
+            'rrsets' => [
+                [
+                    'name' => $name,
+                    'type' => $type,
+                    'changetype' => 'DELETE',
+                ]
+            ],
+        ];
+        return $this->send_reuqest('PATCH', '/servers/' . $this->server_id . '/zones/' . $this->domainid, $param);
+    }
+
+    private function send_reuqest($method, $path, $params = null)
+    {
+        $url = $this->url . $path;
+        $headers[] = 'X-API-Key: ' . $this->apikey;
+        $body = null;
+        if ($method == 'GET' || $method == 'DELETE') {
+            if ($params) {
+                $url .= '?' . http_build_query($params);
+            }
+        } else {
+            $body = json_encode($params);
+            $headers[] = 'Content-Type: application/json';
+        }
+        try {
+            $response = curl_client($url, $body, null, null, $headers, $this->proxy, $method);
+        } catch (Exception $e) {
+            $this->setError($e->getMessage());
+            return false;
+        }
+
+        $arr = json_decode($response['body'], true);
+        if ($response['code'] < 400) {
+            return is_array($arr) ? $arr : true;
+        } elseif (isset($arr['error'])) {
+            $this->setError($arr['error']);
+            return false;
+        } elseif (isset($arr['errors'])) {
+            $this->setError(implode(',', $arr['errors']));
+            return false;
+        } else {
+            $this->setError($response['body']);
+            return false;
+        }
+    }
+
+    private function setError($message)
+    {
+        $this->error = $message;
+        //file_put_contents('logs.txt',date('H:i:s').' '.$message."\r\n", FILE_APPEND);
+    }
+}

app/lib/dns/west.php

@@ -1,4 +1,5 @@
 <?php
+
 namespace app\lib\dns;
 
 use app\lib\DnsInterface;
@@ -6,204 +7,204 @@ use app\lib\DnsInterface;
 /**
  * @see http://apipost.west.cn/
  */
-class west implements DnsInterface {
-	private $username;
-	private $api_password;
-	private $baseUrl = 'https://api.west.cn/api/v2';
-	private $error;
-	private $domain;
-	private $domainid;
+class west implements DnsInterface
+{
+    private $username;
+    private $api_password;
+    private $baseUrl = 'https://api.west.cn/api/v2';
+    private $error;
+    private $domain;
+    private $domainid;
+    private $proxy;
 
-	function __construct($config){
-		$this->username = $config['ak'];
-		$this->api_password = $config['sk'];
-		$this->domain = $config['domain'];
-	}
-
-	public function getError(){
-		return $this->error;
-	}
-
-	public function check(){
-		if($this->getDomainList() != false){
-			return true;
-		}
-		return false;
-	}
-
-	//获取域名列表
-	public function getDomainList($KeyWord=null, $PageNumber=1, $PageSize=20){
-		$param = ['act' => 'getdomains', 'page' => $PageNumber, 'limit' => $PageSize, 'domain' => $KeyWord];
-		$data = $this->execute('/domain/', $param);
-		if($data){
-			$list = [];
-			foreach($data['items'] as $row){
-				$list[] = [
-					'DomainId' => $row['domain'],
-					'Domain' => $row['domain'],
-					'RecordCount' => 0,
-				];
-			}
-			return ['total' => $data['total'], 'list' => $list];
-		}
-		return false;
-	}
-
-	//获取解析记录列表
-	public function getDomainRecords($PageNumber=1, $PageSize=20, $KeyWord = null, $SubDomain = null, $Type = null, $Line = null, $Status = null){
-		$param = ['act' => 'getdnsrecord', 'domain' => $this->domain, 'type' => $Type, 'line' => $Line, 'host' => $KeyWord, 'pageno' => $PageNumber, 'limit' => $PageSize];
-		if(!isNullOrEmpty(($SubDomain))){
-			$param['host'] = $SubDomain;
-		}
-		$data = $this->execute('/domain/', $param);
-		if($data){
-			$list = [];
-			foreach($data['items'] as $row){
-				$list[] = [
-					'RecordId' => $row['id'],
-					'Domain' => $this->domain,
-					'Name' => $row['item'],
-					'Type' => $row['type'],
-					'Value' => $row['value'],
-					'Line' => $row['line'],
-					'TTL' => $row['ttl'],
-					'MX' => $row['level'],
-					'Status' => $row['pause'] == 1 ? '0' : '1',
-					'Weight' => null,
-					'Remark' => null,
-					'UpdateTime' => null,
-				];
-			}
-			return ['total' => $data['total'], 'list' => $list];
-		}
-		return false;
-	}
-
-	//获取子域名解析记录列表
-	public function getSubDomainRecords($SubDomain, $PageNumber=1, $PageSize=20, $Type = null, $Line = null){
-		if($SubDomain == '')$SubDomain='@';
-		return $this->getDomainRecords($PageNumber, $PageSize, null, $SubDomain, $Type, $Line);
-	}
-
-	//获取解析记录详细信息
-	public function getDomainRecordInfo($RecordId){
-		return false;
-	}
-
-	//添加解析记录
-	public function addDomainRecord($Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Remark = null){
-		$param = ['act' => 'adddnsrecord', 'domain' => $this->domain, 'host' => $Name, 'type' => $this->convertType($Type), 'value' => $Value, 'level' => $MX, 'ttl' => intval($TTL), 'line' => $Line];
-		$data = $this->execute('/domain/', $param);
-		return is_array($data) ? $data['id'] : false;
-	}
-
-	//修改解析记录
-	public function updateDomainRecord($RecordId, $Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Remark = null){
-		$param = ['act' => 'moddnsrecord', 'domain' => $this->domain, 'id' => $RecordId, 'type' => $this->convertType($Type), 'value' => $Value, 'level' => $MX, 'ttl' => intval($TTL), 'line' => $Line];
-		$data = $this->execute('/domain/', $param);
-		return is_array($data);
-	}
-
-	//修改解析记录备注
-	public function updateDomainRecordRemark($RecordId, $Remark){
-		return false;
-	}
-
-	//删除解析记录
-	public function deleteDomainRecord($RecordId){
-		$param = ['act' => 'deldnsrecord', 'domain' => $this->domain, 'id' => $RecordId];
-		$data = $this->execute('/domain/', $param);
-		return is_array($data);
-	}
-
-	//设置解析记录状态
-	public function setDomainRecordStatus($RecordId, $Status){
-		$param = ['act' => 'pause', 'domain' => $this->domain, 'id' => $RecordId, 'val' => $Status == '1' ? '0' : '1'];
-		$data = $this->execute('/domain/', $param);
-		return $data !== false;
-	}
-
-	//获取解析记录操作日志
-	public function getDomainRecordLog($PageNumber = 1, $PageSize = 20, $KeyWord = null, $StartDate = null, $endDate = null){
-		return false;
-	}
-
-	//获取解析线路列表
-	public function getRecordLine(){
-		return [
-			''=>['name'=>'默认', 'parent'=>null],
-			'LTEL'=>['name'=>'电信', 'parent'=>null],
-			'LCNC'=>['name'=>'联通', 'parent'=>null],
-			'LMOB'=>['name'=>'移动', 'parent'=>null],
-			'LEDU'=>['name'=>'教育网', 'parent'=>null],
-			'LSEO'=>['name'=>'搜索引擎', 'parent'=>null],
-			'LFOR'=>['name'=>'境外', 'parent'=>null],
-		];
-	}
-
-	//获取域名信息
-	public function getDomainInfo(){
-		return false;
-	}
-
-	//获取域名最低TTL
-	public function getMinTTL(){
-		return false;
-	}
-
-	private function convertType($type){
-		return $type;
-	}
-
-	private function execute($path, $params){
-		$params['username'] = $this->username;
-		$params['time'] = $this->getMillisecond();
-		$params['token'] = md5($this->username.$this->api_password.$params['time']);
-		$response = $this->curl($path, $params);
-		$response = mb_convert_encoding($response, 'UTF-8', 'GBK');
-		$arr=json_decode($response,true);
-		if($arr){
-			if($arr['result'] == 200){
-				return isset($arr['data']) ? $arr['data'] : [];
-			}else{
-				$this->setError($arr['msg']);
-				return false;
-			}
-		}else{
-			$this->setError('返回数据解析失败');
-			return false;
-		}
-	}
-
-	private function curl($path, $params = null){
-		$url = $this->baseUrl . $path;
-		$ch = curl_init($url);
-		curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
-		curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
-		curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
-		curl_setopt($ch, CURLOPT_TIMEOUT, 10);
-		if ($params) {
-            curl_setopt($ch, CURLOPT_POST, true);
-            curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($params));
-        }
-		$response = curl_exec($ch);
-		$errno = curl_errno($ch);
-		if ($errno) {
-			$this->setError('Curl error: ' . curl_error($ch));
-		}
-		curl_close($ch);
-		if ($errno) return false;
-		return $response;
-	}
-
-	private function getMillisecond()
+    public function __construct($config)
     {
-        list($s1, $s2) = explode(' ', microtime());
-        return (float)sprintf('%.0f', (floatval($s1) + floatval($s2)) * 1000);
+        $this->username = $config['ak'];
+        $this->api_password = $config['sk'];
+        $this->domain = $config['domain'];
+        $this->proxy = isset($config['proxy']) ? $config['proxy'] == 1 : false;
     }
 
-	private function setError($message){
-		$this->error = $message;
-		//file_put_contents('logs.txt',date('H:i:s').' '.$message."\r\n", FILE_APPEND);
-	}
-}
+    public function getError()
+    {
+        return $this->error;
+    }
+
+    public function check()
+    {
+        if ($this->getDomainList() != false) {
+            return true;
+        }
+        return false;
+    }
+
+    //获取域名列表
+    public function getDomainList($KeyWord = null, $PageNumber = 1, $PageSize = 20)
+    {
+        $param = ['act' => 'getdomains', 'page' => $PageNumber, 'limit' => $PageSize, 'domain' => $KeyWord];
+        $data = $this->execute('/domain/', $param);
+        if ($data) {
+            $list = [];
+            foreach ($data['items'] as $row) {
+                $list[] = [
+                    'DomainId' => $row['domain'],
+                    'Domain' => $row['domain'],
+                    'RecordCount' => 0,
+                ];
+            }
+            return ['total' => $data['total'], 'list' => $list];
+        }
+        return false;
+    }
+
+    //获取解析记录列表
+    public function getDomainRecords($PageNumber = 1, $PageSize = 20, $KeyWord = null, $SubDomain = null, $Value = null, $Type = null, $Line = null, $Status = null)
+    {
+        $param = ['act' => 'getdnsrecord', 'domain' => $this->domain, 'type' => $Type, 'line' => $Line, 'host' => $KeyWord, 'value' => $Value, 'pageno' => $PageNumber, 'limit' => $PageSize];
+        if (!isNullOrEmpty(($SubDomain))) {
+            $param['host'] = $SubDomain;
+        }
+        $data = $this->execute('/domain/', $param);
+        if ($data) {
+            $list = [];
+            foreach ($data['items'] as $row) {
+                $list[] = [
+                    'RecordId' => $row['id'],
+                    'Domain' => $this->domain,
+                    'Name' => $row['item'],
+                    'Type' => $row['type'],
+                    'Value' => $row['value'],
+                    'Line' => $row['line'],
+                    'TTL' => $row['ttl'],
+                    'MX' => $row['level'],
+                    'Status' => $row['pause'] == 1 ? '0' : '1',
+                    'Weight' => null,
+                    'Remark' => null,
+                    'UpdateTime' => null,
+                ];
+            }
+            return ['total' => $data['total'], 'list' => $list];
+        }
+        return false;
+    }
+
+    //获取子域名解析记录列表
+    public function getSubDomainRecords($SubDomain, $PageNumber = 1, $PageSize = 20, $Type = null, $Line = null)
+    {
+        if ($SubDomain == '') $SubDomain = '@';
+        return $this->getDomainRecords($PageNumber, $PageSize, null, $SubDomain, null, $Type, $Line);
+    }
+
+    //获取解析记录详细信息
+    public function getDomainRecordInfo($RecordId)
+    {
+        return false;
+    }
+
+    //添加解析记录
+    public function addDomainRecord($Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Weight = null, $Remark = null)
+    {
+        $param = ['act' => 'adddnsrecord', 'domain' => $this->domain, 'host' => $Name, 'type' => $this->convertType($Type), 'value' => $Value, 'level' => $MX, 'ttl' => intval($TTL), 'line' => $Line];
+        $data = $this->execute('/domain/', $param);
+        return is_array($data) ? $data['id'] : false;
+    }
+
+    //修改解析记录
+    public function updateDomainRecord($RecordId, $Name, $Type, $Value, $Line = '0', $TTL = 600, $MX = 1, $Weight = null, $Remark = null)
+    {
+        $param = ['act' => 'moddnsrecord', 'domain' => $this->domain, 'id' => $RecordId, 'type' => $this->convertType($Type), 'value' => $Value, 'level' => $MX, 'ttl' => intval($TTL), 'line' => $Line];
+        $data = $this->execute('/domain/', $param);
+        return is_array($data);
+    }
+
+    //修改解析记录备注
+    public function updateDomainRecordRemark($RecordId, $Remark)
+    {
+        return false;
+    }
+
+    //删除解析记录
+    public function deleteDomainRecord($RecordId)
+    {
+        $param = ['act' => 'deldnsrecord', 'domain' => $this->domain, 'id' => $RecordId];
+        $data = $this->execute('/domain/', $param);
+        return is_array($data);
+    }
+
+    //设置解析记录状态
+    public function setDomainRecordStatus($RecordId, $Status)
+    {
+        $param = ['act' => 'pause', 'domain' => $this->domain, 'id' => $RecordId, 'val' => $Status == '1' ? '0' : '1'];
+        $data = $this->execute('/domain/', $param);
+        return $data !== false;
+    }
+
+    //获取解析记录操作日志
+    public function getDomainRecordLog($PageNumber = 1, $PageSize = 20, $KeyWord = null, $StartDate = null, $endDate = null)
+    {
+        return false;
+    }
+
+    //获取解析线路列表
+    public function getRecordLine()
+    {
+        return [
+            '' => ['name' => '默认', 'parent' => null],
+            'LTEL' => ['name' => '电信', 'parent' => null],
+            'LCNC' => ['name' => '联通', 'parent' => null],
+            'LMOB' => ['name' => '移动', 'parent' => null],
+            'LEDU' => ['name' => '教育网', 'parent' => null],
+            'LSEO' => ['name' => '搜索引擎', 'parent' => null],
+            'LFOR' => ['name' => '境外', 'parent' => null],
+        ];
+    }
+
+    //获取域名信息
+    public function getDomainInfo()
+    {
+        return false;
+    }
+
+    //获取域名最低TTL
+    public function getMinTTL()
+    {
+        return false;
+    }
+
+    private function convertType($type)
+    {
+        return $type;
+    }
+
+    private function execute($path, $params)
+    {
+        $params['username'] = $this->username;
+        $params['time'] = getMillisecond();
+        $params['token'] = md5($this->username.$this->api_password.$params['time']);
+        try{
+            $response = curl_client($this->baseUrl . $path, http_build_query($params), null, null, null, $this->proxy);
+        }catch(\Exception $e){
+            $this->setError($e->getMessage());
+            return false;
+        }
+        $response = mb_convert_encoding($response['body'], 'UTF-8', 'GBK');
+        $arr = json_decode($response, true);
+        if ($arr) {
+            if ($arr['result'] == 200) {
+                return isset($arr['data']) ? $arr['data'] : [];
+            } else {
+                $this->setError($arr['msg']);
+                return false;
+            }
+        } else {
+            $this->setError('返回数据解析失败');
+            return false;
+        }
+    }
+
+    private function setError($message)
+    {
+        $this->error = $message;
+        //file_put_contents('logs.txt',date('H:i:s').' '.$message."\r\n", FILE_APPEND);
+    }
+}

app/lib/mail/Aliyun.php

@@ -1,72 +1,42 @@
 <?php
+
 namespace app\lib\mail;
 
+use app\lib\client\Aliyun as AliyunClient;
+
 class Aliyun
 {
-	private $AccessKeyId;
-	private $AccessKeySecret;
+    private $AccessKeyId;
+    private $AccessKeySecret;
+    private $Endpoint = 'dm.aliyuncs.com';
+    private $Version = '2015-11-23';
+    private AliyunClient $client;
 
-	function __construct($AccessKeyId, $AccessKeySecret)
-	{
-		$this->AccessKeyId = $AccessKeyId;
-		$this->AccessKeySecret = $AccessKeySecret;
-	}
-	private function aliyunSignature($parameters, $accessKeySecret, $method)
-	{
-		ksort($parameters);
-		$canonicalizedQueryString = '';
-		foreach ($parameters as $key => $value) {
-			if($value === null) continue;
-			$canonicalizedQueryString .= '&' . $this->percentEncode($key) . '=' . $this->percentEncode($value);
-		}
-		$stringToSign = $method . '&%2F&' . $this->percentencode(substr($canonicalizedQueryString, 1));
-		$signature = base64_encode(hash_hmac("sha1", $stringToSign, $accessKeySecret . "&", true));
+    public function __construct($AccessKeyId, $AccessKeySecret)
+    {
+        $this->AccessKeyId = $AccessKeyId;
+        $this->AccessKeySecret = $AccessKeySecret;
+        $this->client = new AliyunClient($this->AccessKeyId, $this->AccessKeySecret, $this->Endpoint, $this->Version);
+    }
 
-		return $signature;
-	}
-	private function percentEncode($str)
-	{
-		$search = ['+', '*', '%7E'];
-		$replace = ['%20', '%2A', '~'];
-		return str_replace($search, $replace, urlencode($str));
-	}
-	public function send($to, $sub, $msg, $from, $from_name)
-	{
-		if (empty($this->AccessKeyId) || empty($this->AccessKeySecret)) return false;
-		$url = 'https://dm.aliyuncs.com/';
-		$data = array(
-			'Action' => 'SingleSendMail',
-			'AccountName' => $from,
-			'ReplyToAddress' => 'false',
-			'AddressType' => 1,
-			'ToAddress' => $to,
-			'FromAlias' => $from_name,
-			'Subject' => $sub,
-			'HtmlBody' => $msg,
-			'Format' => 'JSON',
-			'Version' => '2015-11-23',
-			'AccessKeyId' => $this->AccessKeyId,
-			'SignatureMethod' => 'HMAC-SHA1',
-			'Timestamp' => gmdate('Y-m-d\TH:i:s\Z'),
-			'SignatureVersion' => '1.0',
-			'SignatureNonce' => random(8)
-		);
-		$data['Signature'] = $this->aliyunSignature($data, $this->AccessKeySecret, 'POST');
-		$ch = curl_init($url);
-		curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
-		curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
-		curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
-		curl_setopt($ch, CURLOPT_TIMEOUT, 10);
-		curl_setopt($ch, CURLOPT_POST, 1);
-		curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($data));
-		$json = curl_exec($ch);
-		$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
-		curl_close($ch);
-		$arr = json_decode($json, true);
-		if ($httpCode == 200) {
-			return true;
-		} else {
-			return $arr['Message'];
-		}
-	}
-}
+    public function send($to, $sub, $msg, $from, $from_name)
+    {
+        if (empty($this->AccessKeyId) || empty($this->AccessKeySecret)) return false;
+        $param = [
+            'Action' => 'SingleSendMail',
+            'AccountName' => $from,
+            'ReplyToAddress' => 'false',
+            'AddressType' => 1,
+            'ToAddress' => $to,
+            'FromAlias' => $from_name,
+            'Subject' => $sub,
+            'HtmlBody' => $msg,
+        ];
+        try {
+            $this->client->request($param);
+            return true;
+        } catch (\Exception $e) {
+            return $e->getMessage();
+        }
+    }
+}

app/lib/mail/Sendcloud.php

@@ -1,37 +1,42 @@
 <?php
+
 namespace app\lib\mail;
 
-class Sendcloud {
-	private $apiUser;
-	private $apiKey;
+class Sendcloud
+{
+    private $apiUser;
+    private $apiKey;
 
-	function __construct($apiUser, $apiKey){
+    public function __construct($apiUser, $apiKey)
+    {
         $this->apiUser = $apiUser;
         $this->apiKey = $apiKey;
     }
-	public function send($to, $sub, $msg, $from, $from_name){
-		if(empty($this->apiUser)||empty($this->apiKey))return false;
-		$url='http://api.sendcloud.net/apiv2/mail/send';
-		$data=array(
-			'apiUser' => $this->apiUser,
-			'apiKey' => $this->apiKey,
-			'from' => $from,
-			'fromName' => $from_name,
-			'to' => $to,
-			'subject' => $sub,
-			'html' => $msg);
-		$ch=curl_init($url);
-		curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
-		curl_setopt($ch, CURLOPT_TIMEOUT, 10);
-		curl_setopt($ch, CURLOPT_POST, 1);
-		curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
-		$json=curl_exec($ch);
-		curl_close($ch);
-		$arr=json_decode($json,true);
-		if($arr['statusCode']==200){
-			return true;
-		}else{
-			return implode("\n",$arr['message']);
-		}
-	}
+    public function send($to, $sub, $msg, $from, $from_name)
+    {
+        if (empty($this->apiUser) || empty($this->apiKey)) return false;
+        $url = 'http://api.sendcloud.net/apiv2/mail/send';
+        $data = array(
+            'apiUser' => $this->apiUser,
+            'apiKey' => $this->apiKey,
+            'from' => $from,
+            'fromName' => $from_name,
+            'to' => $to,
+            'subject' => $sub,
+            'html' => $msg
+        );
+        $ch = curl_init($url);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_TIMEOUT, 10);
+        curl_setopt($ch, CURLOPT_POST, 1);
+        curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
+        $json = curl_exec($ch);
+        curl_close($ch);
+        $arr = json_decode($json, true);
+        if ($arr['statusCode'] == 200) {
+            return true;
+        } else {
+            return implode("\n", $arr['message']);
+        }
+    }
 }

app/middleware/AuthApi.php

@@ -1,4 +1,5 @@
 <?php
+
 declare (strict_types=1);
 
 namespace app\middleware;
@@ -12,23 +13,29 @@ class AuthApi
         $uid = input('post.uid/d');
         $timestamp = input('post.timestamp');
         $sign = input('post.sign');
-        if(!$uid || empty($timestamp) || empty($sign)){
-            return json(['code'=>-1, 'msg'=>'认证参数不能为空'])->code(403);
+        if (!$uid || empty($timestamp) || empty($sign)) {
+            return json(['code' => -1, 'msg' => '认证参数不能为空'])->code(403);
         }
-        if($timestamp < time()-300 || $timestamp > time()+300){
-            return json(['code'=>-1, 'msg'=>'时间戳不合法'])->code(403);
+        if ($timestamp < time() - 300 || $timestamp > time() + 300) {
+            return json(['code' => -1, 'msg' => '时间戳不合法'])->code(403);
         }
         $user = Db::name('user')->where('id', $uid)->find();
-        if(!$user) return json(['code'=>-1, 'msg'=>'用户不存在'])->code(403);
-        if($user['status'] == 0) return json(['code'=>-1, 'msg'=>'该用户已被封禁'])->code(403);
-        if($user['is_api'] == 0) return json(['code'=>-1, 'msg'=>'该用户未开启API权限'])->code(403);
-        if(md5($uid.$timestamp.$user['apikey']) !== $sign){
-            return json(['code'=>-1, 'msg'=>'签名错误'])->code(403);
+        if (!$user) {
+            return json(['code' => -1, 'msg' => '用户不存在'])->code(403);
+        }
+        if ($user['status'] == 0) {
+            return json(['code' => -1, 'msg' => '该用户已被封禁'])->code(403);
+        }
+        if ($user['is_api'] == 0) {
+            return json(['code' => -1, 'msg' => '该用户未开启API权限'])->code(403);
+        }
+        if (md5($uid.$timestamp.$user['apikey']) !== $sign) {
+            return json(['code' => -1, 'msg' => '签名错误'])->code(403);
         }
 
         $user['type'] = 'user';
         $user['permission'] = [];
-        if($user['level'] == 1){
+        if ($user['level'] == 1) {
             $user['permission'] = Db::name('permission')->where('uid', $uid)->column('domain');
         }
 

app/middleware/AuthUser.php

@@ -1,4 +1,5 @@
 <?php
+
 declare (strict_types=1);
 
 namespace app\middleware;
@@ -12,28 +13,28 @@ class AuthUser
         $islogin = false;
         $cookie = cookie('user_token');
         $user = null;
-        if($cookie){
-            $token=authcode($cookie, 'DECODE', env('app.sys_key'));
-            if($token){
+        if ($cookie && config_get('sys_key')) {
+            $token = authcode($cookie, 'DECODE', config_get('sys_key'));
+            if ($token) {
                 list($type, $uid, $sid, $expiretime) = explode("\t", $token);
-                if($type == 'user'){
+                if ($type == 'user') {
                     $user = Db::name('user')->where('id', $uid)->find();
-                    if($user && $user['status']==1){
-                        $session=md5($user['id'].$user['password']);
-                        if($session==$sid && $expiretime>time()) {
+                    if ($user && $user['status'] == 1) {
+                        $session = md5($user['id'].$user['password']);
+                        if ($session === $sid && $expiretime > time()) {
                             $islogin = true;
                         }
                         $user['type'] = 'user';
                         $user['permission'] = [];
-                        if($user['level'] == 1){
+                        if ($user['level'] == 1) {
                             $user['permission'] = Db::name('permission')->where('uid', $uid)->column('domain');
                         }
                     }
-                }elseif($type == 'domain'){
+                } elseif ($type == 'domain') {
                     $user = Db::name('domain')->where('id', $uid)->find();
-                    if($user && $user['is_sso']==1){
-                        $session=md5($user['id'].$user['name']);
-                        if($session==$sid && $expiretime>time()) {
+                    if ($user && $user['is_sso'] == 1) {
+                        $session = md5($user['id'].$user['name']);
+                        if ($session === $sid && $expiretime > time()) {
                             $islogin = true;
                         }
                         $user['username'] = $user['name'];

app/middleware/CheckLogin.php

@@ -1,16 +1,16 @@
 <?php
+
 declare (strict_types=1);
 
 namespace app\middleware;
 
-
 class CheckLogin
 {
     public function handle($request, \Closure $next)
     {
-        if (!request()->islogin) {
+        if (!$request->islogin) {
             if ($request->isAjax() || !$request->isGet()) {
-                return json(['code'=>-1, 'msg'=>'未登录'])->code(401);
+                return json(['code' => -1, 'msg' => '未登录'])->code(401);
             }
             return redirect((string)url('/login'));
         }

app/middleware/LoadConfig.php

@@ -1,11 +1,13 @@
 <?php
-declare (strict_types = 1);
+
+declare (strict_types=1);
 
 namespace app\middleware;
 
 use Exception;
 use think\facade\Db;
 use think\facade\Config;
+use think\facade\Cache;
 
 class LoadConfig
 {
@@ -18,22 +20,27 @@ class LoadConfig
      */
     public function handle($request, \Closure $next)
     {
-        if (!file_exists(app()->getRootPath().'.env')){
-            if(strpos(request()->url(),'/install')===false){
+        if (!file_exists(app()->getRootPath().'.env')) {
+            if (strpos($request->url(), '/install') === false) {
                 return redirect((string)url('/install'))->header([
                     'Cache-Control' => 'no-store, no-cache, must-revalidate',
                     'Pragma' => 'no-cache',
                 ]);
-            }else{
+            } else {
                 return $next($request);
             }
         }
-        
-        try{
-            $res = Db::name('config')->cache('configs',0)->column('value','key');
+
+        try {
+            $res = Db::name('config')->cache('configs', 0)->column('value', 'key');
+            if (empty($res['sys_key']) && !empty(env('app.sys_key'))) {
+                config_set('sys_key', env('app.sys_key'));
+                Cache::delete('configs');
+                $res['sys_key'] = env('app.sys_key');
+            }
             Config::set($res, 'sys');
-        }catch(Exception $e){
-            if(!strpos($e->getMessage(), 'doesn\'t exist')){
+        } catch (Exception $e) {
+            if (!strpos($e->getMessage(), 'doesn\'t exist')) {
                 throw $e;
             }
         }

app/middleware/RefererCheck.php

@@ -1,4 +1,5 @@
 <?php
+
 declare (strict_types=1);
 
 namespace app\middleware;
@@ -16,7 +17,7 @@ class RefererCheck
      */
     public function handle($request, \Closure $next)
     {
-        if(!checkRefererHost()){
+        if (!checkRefererHost()) {
             return response('Access Denied', 403);
         }
         return $next($request);

app/middleware/ViewOutput.php

@@ -1,4 +1,5 @@
 <?php
+
 declare (strict_types=1);
 
 namespace app\middleware;
@@ -18,7 +19,7 @@ class ViewOutput
     {
         View::assign('islogin', $request->islogin);
         View::assign('user', $request->user);
-        View::assign('cdnpublic', '//lib.baomitu.com/');
+        View::assign('cdnpublic', 'https://s4.zstatic.net/ajax/libs/');
         View::assign('skin', getAdminSkin());
         return $next($request);
     }

app/service/CertDeployService.php

@@ -0,0 +1,145 @@
+<?php
+
+namespace app\service;
+
+use Exception;
+use think\facade\Db;
+use app\lib\DeployHelper;
+
+/**
+ * SSL证书自动部署
+ */
+class CertDeployService
+{
+    private static $retry_interval = [60, 300, 600, 1800, 3600];
+
+    private $client;
+    private $aid;
+    private $task;
+    private $info;
+
+    //任务状态：0:待处理 1:已完成 -1:处理失败
+    public function __construct($tid)
+    {
+        $task = Db::name('cert_deploy')->where('id', $tid)->find();
+        if (!$task) throw new Exception('该自动部署任务不存在', 102);
+        $this->task = $task;
+
+        $this->aid = $task['aid'];
+        $this->client = DeployHelper::getModel($this->aid);
+        if (!$this->client) throw new Exception('该自动部署任务类型不存在', 102);
+
+        $this->info = $task['info'] ? json_decode($task['info'], true) : null;
+    }
+
+    public function process($isManual = false)
+    {
+        if ($this->task['status'] >= 1) return;
+        if ($this->task['retry'] >= 6 && !$isManual) {
+            throw new Exception('已超出最大重试次数('.$this->task['error'].')', 103);
+        }
+
+        $order = Db::name('cert_order')->where('id', $this->task['oid'])->find();
+        if(!$order) throw new Exception('SSL证书订单不存在', 102);
+        if($order['status'] == 4) throw new Exception('SSL证书订单已吊销', 102);
+        if($order['status'] != 3) throw new Exception('SSL证书订单未完成签发', 102);
+        if(empty($order['fullchain']) || empty($order['privatekey'])) throw new Exception('SSL证书或私钥内容不存在', 102);
+
+        $this->lockTaskData();
+        try {
+            $this->deploy($order['fullchain'], $order['privatekey']);
+        } finally {
+            $this->unlockTaskData();
+        }
+    }
+
+    //部署证书
+    public function deploy($fullchain, $privatekey)
+    {
+        $this->client->setLogger(function ($txt) {
+            $this->saveLog($txt);
+        });
+        $this->saveLog(date('Y-m-d H:i:s'));
+        $config = json_decode($this->task['config'], true);
+        $config['domainList'] = Db::name('cert_domain')->where('oid', $this->task['oid'])->order('sort', 'asc')->column('domain');
+        try {
+            $this->client->deploy($fullchain, $privatekey, $config, $this->info);
+            $this->saveResult(1);
+            $this->saveLog('[Success] 证书部署成功');
+        } catch (Exception $e) {
+            $this->saveResult(-1, $e->getMessage(), date('Y-m-d H:i:s', time() + (array_key_exists($this->task['retry'], self::$retry_interval) ? self::$retry_interval[$this->task['retry']] : 3600)));
+            throw $e;
+        } finally {
+            if($this->info){
+                Db::name('cert_deploy')->where('id', $this->task['id'])->update(['info' => json_encode($this->info)]);
+            }
+        }
+    }
+
+    //重置任务
+    public function reset()
+    {
+        Db::name('cert_deploy')->where('id', $this->task['id'])->data(['status' => 0, 'retry' => 0, 'retrytime' => null, 'issend' => 0, 'islock' => 0])->update();
+        //$file_name = app()->getRuntimePath().'log/'.$this->task['processid'].'.log';
+        //if (file_exists($file_name)) unlink($file_name);
+        $this->task['status'] = 0;
+        $this->task['retry'] = 0;
+    }
+
+    private function saveResult($status, $error = null, $retrytime = null)
+    {
+        $this->task['status'] = $status;
+        $update = ['status' => $status, 'error' => $error, 'retrytime' => $retrytime];
+        if ($status == 1){
+            $update['retry'] = 0;
+            $update['lasttime'] = date('Y-m-d H:i:s');
+        }
+        $res = Db::name('cert_deploy')->where('id', $this->task['id'])->data($update);
+        if ($status < 0 || $retrytime) {
+            $this->task['retry']++;
+            $res->inc('retry');
+        }
+        $res->update();
+        if ($error) {
+            $this->saveLog('[Error] ' . $error);
+        }
+    }
+
+    private function lockTaskData()
+    {
+        Db::startTrans();
+        try {
+            $isLock = Db::name('cert_deploy')->where('id', $this->task['id'])->lock(true)->value('islock');
+            if ($isLock == 1 && time() - strtotime($this->task['locktime']) < 3600) {
+                throw new Exception('部署任务处理中，请稍后再试');
+            }
+            $update = ['islock' => 1, 'locktime' => date('Y-m-d H:i:s')];
+            if (empty($this->task['processid'])) $this->task['processid'] = $update['processid'] = getSid();
+            Db::name('cert_deploy')->where('id', $this->task['id'])->update($update);
+            Db::commit();
+        } catch (Exception $e) {
+            Db::rollback();
+            throw $e;
+        }
+    }
+
+    private function unlockTaskData()
+    {
+        Db::name('cert_deploy')->where('id', $this->task['id'])->update(['islock' => 0]);
+    }
+
+    private function saveLog($txt)
+    {
+        if (empty($this->task['processid'])) return;
+        if (!is_dir(app()->getRuntimePath() . 'log')) mkdir(app()->getRuntimePath() . 'log');
+        $file_name = app()->getRuntimePath().'log/'.$this->task['processid'].'.log';
+        $file_exists = file_exists($file_name);
+        file_put_contents($file_name, $txt . PHP_EOL, FILE_APPEND);
+        if (!$file_exists) {
+            @chmod($file_name, 0777);
+        }
+        if(php_sapi_name() == 'cli'){
+            echo $txt . PHP_EOL;
+        }
+    }
+}

app/service/CertOrderService.php

@@ -0,0 +1,438 @@
+<?php
+
+namespace app\service;
+
+use Exception;
+use think\facade\Db;
+use app\lib\CertHelper;
+use app\utils\CertDnsUtils;
+
+/**
+ * SSL证书订单处理
+ */
+class CertOrderService
+{
+    private static $retry_interval = [60, 180, 300, 600, 600];
+
+    private $client;
+    private $aid;
+    private $atype;
+    private $order;
+    private $info;
+    private $dnsList;
+    private $domainList;
+    private $cnameDomainList = [];
+
+    // 订单状态：0:待提交 1:待验证 2:正在验证 3:已签发 4:已吊销 -1:购买证书失败 -2:创建订单失败 -3:添加DNS失败 -4:验证DNS失败 -5:验证订单失败 -6:订单验证未通过 -7:签发证书失败
+    public function __construct($oid)
+    {
+        $order = Db::name('cert_order')->where('id', $oid)->find();
+        if (!$order) throw new Exception('该证书订单不存在', 102);
+        $this->order = $order;
+
+        $this->aid = $order['aid'];
+        $account = Db::name('cert_account')->where('id', $this->aid)->find();
+        if (!$account) throw new Exception('该证书账户不存在', 102);
+        $config = json_decode($account['config'], true);
+        $ext = $account['ext'] ? json_decode($account['ext'], true) : null;
+        $this->atype = $account['type'];
+        $this->client = CertHelper::getModel2($account['type'], $config, $ext);
+        if (!$this->client) throw new Exception('该证书类型不存在', 102);
+
+        $domainList = Db::name('cert_domain')->where('oid', $oid)->order('sort', 'asc')->column('domain');
+        if (!$domainList) throw new Exception('该证书订单没有绑定域名', 102);
+        $this->domainList = $domainList;
+        $this->info = $order['info'] ? json_decode($order['info'], true) : null;
+        $this->dnsList = $order['dns'] ? json_decode($order['dns'], true) : null;
+    }
+
+    //执行证书申请
+    public function process($isManual = false)
+    {
+        if ($this->order['status'] >= 3) return 3;
+        if ($this->order['retry2'] >= 3 && !$isManual) {
+            throw new Exception('已超出最大重试次数('.$this->order['error'].')', 103);
+        }
+        if ($this->order['status'] != 1 && $this->order['status'] != 2 && $this->order['retry'] >= 3 && !$isManual) {
+            if ($this->order['status'] == -2 || $this->order['status'] == -5 || $this->order['status'] == -6 || $this->order['status'] == -7) {
+                $this->cancel();
+                if($this->order['status'] <= -5) $this->delDns();
+                Db::name('cert_order')->where('id', $this->order['id'])->data(['status' => 0, 'retry' => 0, 'retrytime' => null, 'updatetime' => date('Y-m-d H:i:s')])->inc('retry2')->update();
+                $this->order['status'] = 0;
+                $this->order['retry'] = 0;
+            } else {
+                throw new Exception('已超出最大重试次数('.$this->order['error'].')', 103);
+            }
+        }
+
+        $cname = CertHelper::$cert_config[$this->atype]['cname'];
+        foreach($this->domainList as $domain){
+            $mainDomain = getMainDomain($domain);
+            $drow = Db::name('domain')->where('name', $mainDomain)->find();
+            if (!$drow && preg_match('/^xn--/', $mainDomain)) {
+                $drow = Db::name('domain')->where('name', idn_to_utf8($mainDomain))->find();
+            }
+            if (!$drow) {
+                if (substr($domain, 0, 2) == '*.') $domain = substr($domain, 2);
+                $cname_row = Db::name('cert_cname')->where('domain', $domain)->where('status', 1)->find();
+                if (!$cname || !$cname_row) {
+                    $errmsg = '域名'.$domain.'未在本系统添加';
+                    Db::name('cert_order')->where('id', $this->order['id'])->data(['error'=>$errmsg]);
+                    throw new Exception($errmsg, 103);
+                } else {
+                    $this->cnameDomainList[] = $cname_row['id'];
+                }
+            }
+        }
+
+        $this->lockOrder();
+        try {
+            return $this->processOrder($isManual);
+        } finally {
+            $this->unlockOrder();
+            if (($this->order['status'] == -2 || $this->order['status'] == -5 || $this->order['status'] == -6 || $this->order['status'] == -7) && $this->order['retry'] >= 3) {
+                Db::name('cert_order')->where('id', $this->order['id'])->data(['retrytime' => date('Y-m-d H:i:s', time() + 3600)])->update();
+            }
+        }
+    }
+
+    private function processOrder($isManual = false)
+    {
+        $this->client->setLogger(function ($txt) {
+            $this->saveLog($txt);
+        });
+        // step1: 购买证书
+        if ($this->order['status'] == 0 || $this->order['status'] == -1) {
+            $this->saveLog(date('Y-m-d H:i:s').' - 开始购买证书');
+            $this->buyCert();
+        }
+        // step2: 创建订单
+        if ($this->order['status'] == 0 || $this->order['status'] == -2) {
+            $this->saveLog(date('Y-m-d H:i:s').' - 开始创建订单');
+            $this->createOrder();
+        }
+        // step3: 添加DNS
+        if ($isManual && $this->order['status'] == -3 && CertDnsUtils::verifyDns($this->dnsList)) {
+            $this->saveResult(1);
+            $this->saveLog('检测到DNS记录已添加成功');
+            return 1;
+        }
+        if ($this->order['status'] == 0 || $this->order['status'] == -3) {
+            $this->saveLog(date('Y-m-d H:i:s').' - 开始添加DNS记录');
+            $this->addDns();
+            $this->saveLog('添加DNS记录成功，请等待生效后进行验证...');
+            if (CertHelper::$cert_config[$this->atype]['cname']) {
+                Db::name('cert_order')->where('id', $this->order['id'])->update(['retrytime' => date('Y-m-d H:i:s', time() + 180)]);
+            }
+            return 1;
+        }
+        // step4: 查询DNS
+        if ($this->order['status'] == 1 || $this->order['status'] == -4) {
+            $this->verifyDns();
+        }
+        // step5: 验证订单
+        if ($this->order['status'] == 1 || $this->order['status'] == -5) {
+            $this->saveLog(date('Y-m-d H:i:s').' - 开始验证订单');
+            $this->authOrder();
+        }
+        // step6: 查询验证结果
+        if ($this->order['status'] == 2 || $this->order['status'] == -6) {
+            $this->saveLog(date('Y-m-d H:i:s').' - 开始查询验证结果');
+            $this->getAuthStatus();
+        }
+        // step7: 签发证书
+        if ($this->order['status'] == 2 || $this->order['status'] == -7) {
+            $this->saveLog(date('Y-m-d H:i:s').' - 开始签发证书');
+            $this->finalizeOrder();
+        }
+        $this->delDns();
+        $this->resetRetry2();
+        $this->saveLog('[Success] 证书签发成功');
+        Db::name('cert_deploy')->where('oid', $this->order['id'])->data(['status' => 0, 'retry' => 0, 'retrytime' => null, 'issend' => 0])->update();
+        return 3;
+    }
+
+    private function lockOrder()
+    {
+        Db::startTrans();
+        try {
+            $isLock = Db::name('cert_order')->where('id', $this->order['id'])->lock(true)->value('islock');
+            if ($isLock == 1 && time() - strtotime($this->order['locktime']) < 3600) {
+                throw new Exception('订单正在处理中，请稍后再试', 102);
+            }
+            $update = ['islock' => 1, 'locktime' => date('Y-m-d H:i:s')];
+            if (empty($this->order['processid'])) $this->order['processid'] = $update['processid'] = getSid();
+            Db::name('cert_order')->where('id', $this->order['id'])->update($update);
+            Db::commit();
+        } catch (Exception $e) {
+            Db::rollback();
+            throw $e;
+        }
+    }
+
+    private function unlockOrder()
+    {
+        Db::name('cert_order')->where('id', $this->order['id'])->update(['islock' => 0]);
+    }
+
+    private function saveResult($status, $error = null, $retrytime = null)
+    {
+        $this->order['status'] = $status;
+        $update = ['status' => $status, 'error' => $error, 'updatetime' => date('Y-m-d H:i:s'), 'retrytime' => $retrytime];
+        $res = Db::name('cert_order')->where('id', $this->order['id'])->data($update);
+        if ($status < 0 || $retrytime) {
+            $this->order['retry']++;
+            $res->inc('retry');
+        }
+        $res->update();
+        if ($error) {
+            $this->saveLog('[Error] ' . $error);
+        }
+    }
+
+    private function resetRetry()
+    {
+        if ($this->order['retry'] > 0) {
+            $this->order['retry'] = 0;
+            Db::name('cert_order')->where('id', $this->order['id'])->update(['retry' => 0, 'retrytime' => null]);
+        }
+    }
+
+    private function resetRetry2()
+    {
+        if ($this->order['retry2'] > 0) {
+            $this->order['retry2'] = 0;
+            Db::name('cert_order')->where('id', $this->order['id'])->update(['retry2' => 0, 'retrytime' => null]);
+        }
+    }
+
+    //重置订单
+    public function reset()
+    {
+        Db::name('cert_order')->where('id', $this->order['id'])->data(['status' => 0, 'retry' => 0, 'retry2' => 0, 'retrytime' => null, 'processid' => null, 'updatetime' => date('Y-m-d H:i:s'), 'issend' => 0, 'islock' => 0])->update();
+        $file_name = app()->getRuntimePath().'log/'.$this->order['processid'].'.log';
+        if (file_exists($file_name)) unlink($file_name);
+        $this->order['status'] = 0;
+        $this->order['retry'] = 0;
+        $this->order['retry2'] = 0;
+        $this->order['processid'] = null;
+    }
+
+    //购买证书
+    public function buyCert()
+    {
+        try {
+            $this->client->buyCert($this->domainList, $this->info);
+        } catch (Exception $e) {
+            $this->saveResult(-1, $e->getMessage());
+            throw $e;
+        }
+        if($this->info){
+            Db::name('cert_order')->where('id', $this->order['id'])->update(['info' => json_encode($this->info)]);
+        }
+        $this->order['status'] = 0;
+        $this->resetRetry();
+    }
+
+    //创建订单
+    public function createOrder()
+    {
+        try {
+            if (!empty($this->cnameDomainList)) {
+                foreach($this->cnameDomainList as $cnameId){
+                    $this->checkDomainCname($cnameId);
+                }
+            }
+            try {
+                $this->dnsList = $this->client->createOrder($this->domainList, $this->info, $this->order['keytype'], $this->order['keysize']);
+            } catch (Exception $e) {
+                if (strpos($e->getMessage(), 'KeyID header contained an invalid account URL') !== false) {
+                    $ext = $this->client->register();
+                    Db::name('cert_account')->where('id', $this->aid)->update(['ext' => json_encode($ext)]);
+                    $this->dnsList = $this->client->createOrder($this->domainList, $this->info, $this->order['keytype'], $this->order['keysize']);
+                } else {
+                    throw $e;
+                }
+            }
+        } catch (Exception $e) {
+            $this->saveResult(-2, $e->getMessage());
+            throw $e;
+        }
+        Db::name('cert_order')->where('id', $this->order['id'])->update(['info' => json_encode($this->info), 'dns' => json_encode($this->dnsList)]);
+
+        if (!empty($this->dnsList)) {
+            $dns_txt = '需验证的DNS记录如下:';
+            foreach ($this->dnsList as $mainDomain => $list) {
+                foreach ($list as $row) {
+                    $domain = $row['name'] . '.' . $mainDomain;
+                    $dns_txt .= PHP_EOL.'主机记录: '.$domain.' 类型: '.$row['type'].' 记录值: '.$row['value'];
+                }
+            }
+            $this->saveLog($dns_txt);
+        }
+        $this->order['status'] = 0;
+        $this->resetRetry();
+    }
+
+    //验证DNS记录
+    public function verifyDns()
+    {
+        $verify = CertDnsUtils::verifyDns($this->dnsList);
+        if (!$verify) {
+            if ($this->order['retry'] >= 10) {
+                $this->saveResult(-4, '未查询到DNS解析记录');
+            } else {
+                $this->saveLog('未查询到DNS解析记录(尝试第'.($this->order['retry']+1).'次)');
+                $this->saveResult(1, null, date('Y-m-d H:i:s', time() + (array_key_exists($this->order['retry'], self::$retry_interval) ? self::$retry_interval[$this->order['retry']] : 1800)));
+            }
+            throw new Exception('未查询到DNS解析记录(尝试第'.($this->order['retry']).'次)，请稍后再试');
+        }
+        if($this->order['retry'] == 0 && time() - strtotime($this->order['updatetime']) < 10){
+            throw new Exception('请等待'.(10 - (time() - strtotime($this->order['updatetime']))).'秒后再试');
+        }
+        $this->order['status'] = 1;
+        $this->resetRetry();
+    }
+
+    //验证订单
+    public function authOrder()
+    {
+        try {
+            $this->client->authOrder($this->domainList, $this->info);
+        } catch (Exception $e) {
+            $this->saveResult(-5, $e->getMessage());
+            throw $e;
+        }
+        $this->saveResult(2);
+        $this->resetRetry();
+    }
+
+    //查询验证结果
+    public function getAuthStatus()
+    {
+        try {
+            $status = $this->client->getAuthStatus($this->domainList, $this->info);
+        } catch (Exception $e) {
+            $this->saveResult(-6, $e->getMessage());
+            throw $e;
+        }
+        if(!$status){
+            if ($this->order['retry'] >= 10) {
+                $this->saveResult(-6, '订单验证未通过');
+            } else {
+                $this->saveLog('订单验证未通过(尝试第'.($this->order['retry']+1).'次)');
+                $this->saveResult(2, null, date('Y-m-d H:i:s', time() + (array_key_exists($this->order['retry'], self::$retry_interval) ? self::$retry_interval[$this->order['retry']] : 1800)));
+            }
+            throw new Exception('订单验证未通过(尝试第'.($this->order['retry']).'次)，请稍后再试');
+        }
+        $this->order['status'] = 2;
+        $this->resetRetry();
+    }
+
+    //签发证书
+    public function finalizeOrder()
+    {
+        try {
+            $result = $this->client->finalizeOrder($this->domainList, $this->info, $this->order['keytype'], $this->order['keysize']);
+        } catch (Exception $e) {
+            $this->saveResult(-7, $e->getMessage());
+            throw $e;
+        }
+        $this->order['issuer'] = $result['issuer'];
+        Db::name('cert_order')->where('id', $this->order['id'])->update(['fullchain' => $result['fullchain'], 'privatekey' => $result['private_key'], 'issuer' => $result['issuer'], 'issuetime' => date('Y-m-d H:i:s', $result['validFrom']), 'expiretime' => date('Y-m-d H:i:s', $result['validTo'])]);
+        $this->saveResult(3);
+        $this->resetRetry();
+    }
+
+    //吊销证书
+    public function revoke()
+    {
+        $this->client->setLogger(function ($txt) {
+            $this->saveLog($txt);
+        });
+        try {
+            $this->client->revoke($this->info, $this->order['fullchain']);
+        } catch (Exception $e) {
+            throw $e;
+        }
+        $this->saveResult(4);
+    }
+
+    //取消证书订单
+    public function cancel(){
+        $this->client->setLogger(function ($txt) {
+            $this->saveLog($txt);
+        });
+        if($this->order['status'] == 1 || $this->order['status'] == 2 || $this->order['status'] < -2){
+            try {
+                $this->client->cancel($this->info);
+            } catch (Exception $e) {
+            }
+        }
+    }
+
+    //添加DNS记录
+    public function addDns()
+    {
+        if (empty($this->dnsList)) {
+            $this->saveResult(1);
+            return;
+        }
+        try {
+            CertDnsUtils::addDns($this->dnsList, function ($txt) {
+                $this->saveLog($txt);
+            }, !empty($this->cnameDomainList));
+        } catch (Exception $e) {
+            $this->saveResult(-3, $e->getMessage());
+            throw $e;
+        }
+        $this->saveResult(1);
+        $this->resetRetry();
+    }
+
+    //删除DNS记录
+    public function delDns()
+    {
+        if (empty($this->dnsList)) return;
+        try {
+            CertDnsUtils::delDns($this->dnsList, function ($txt) {
+                $this->saveLog($txt);
+            }, true);
+        } catch (Exception $e) {
+            $this->saveLog('[Error] ' . $e->getMessage());
+        }
+    }
+
+    //检查域名CNAME代理记录
+    private function checkDomainCname($id)
+    {
+        $row = Db::name('cert_cname')->alias('A')->join('domain B', 'A.did = B.id')->where('A.id', $id)->field('A.*,B.name cnamedomain')->find();
+        $domain = '_acme-challenge.' . $row['domain'];
+        $record = $row['rr'] . '.' . $row['cnamedomain'];
+        $result = \app\utils\DnsQueryUtils::get_dns_records($domain, 'CNAME');
+        if (!$result || !in_array($record, $result)) {
+            $result = \app\utils\DnsQueryUtils::query_dns_doh($domain, 'CNAME');
+            if (!$result || !in_array($record, $result)) {
+                if ($row['status'] == 1) {
+                    Db::name('cert_cname')->where('id', $id)->update(['status' => 0]);
+                }
+                throw new Exception('域名' . $row['domain'] . '的CNAME代理记录未验证通过');
+            }
+        }
+    }
+
+    private function saveLog($txt)
+    {
+        if (empty($this->order['processid'])) return;
+        if (!is_dir(app()->getRuntimePath() . 'log')) mkdir(app()->getRuntimePath() . 'log');
+        $file_name = app()->getRuntimePath().'log/'.$this->order['processid'].'.log';
+        $file_exists = file_exists($file_name);
+        file_put_contents($file_name, $txt . PHP_EOL, FILE_APPEND);
+        if (!$file_exists) {
+            @chmod($file_name, 0777);
+        }
+        if(php_sapi_name() == 'cli'){
+            echo $txt . PHP_EOL;
+        }
+    }
+}

app/service/CertTaskService.php

@@ -0,0 +1,94 @@
+<?php
+
+namespace app\service;
+
+use Exception;
+use think\facade\Db;
+use app\utils\MsgNotice;
+
+class CertTaskService
+{
+
+    public function execute()
+    {
+        $this->execute_deploy();
+        $this->execute_order();
+        config_set('certtask_time', date("Y-m-d H:i:s"));
+        echo 'done'.PHP_EOL;
+    }
+
+    private function execute_order()
+    {
+        $days = config_get('cert_renewdays', 7);
+        $list = Db::name('cert_order')->field('id,status,issend')->whereRaw('status NOT IN (3,4) AND (retrytime IS NULL OR retrytime<NOW()) OR status=3 AND expiretime<:expiretime', ['expiretime' => date('Y-m-d H:i:s', time() + $days * 86400)])->select();
+        //print_r($list);exit;
+        $failcount = 0;
+        foreach ($list as $row) {
+            try {
+                $service = new CertOrderService($row['id']);
+                if ($row['status'] == 3) {
+                    $service->reset();
+                }
+                $retcode = $service->process();
+                if ($retcode == 3) {
+                    echo 'ID:'.$row['id'].' 证书已签发成功！'.PHP_EOL;
+                    if($row['issend'] == 0) MsgNotice::cert_order_send($row['id'], true);
+                } elseif ($retcode == 1) {
+                    echo 'ID:'.$row['id'].' 添加DNS记录成功！'.PHP_EOL;
+                }
+                break;
+            } catch (Exception $e) {
+                echo 'ID:'.$row['id'].' '.$e->getMessage().PHP_EOL;
+                if ($e->getCode() == 102) {
+                    break;
+                } elseif ($e->getCode() == 103) {
+                    if($row['issend'] == 0) MsgNotice::cert_order_send($row['id'], false);
+                } else {
+                    $failcount++;
+                }
+            }
+            if ($failcount >= 3) break;
+            sleep(1);
+        }
+    }
+
+    private function execute_deploy()
+    {
+        $start = config_get('deploy_hour_start', 0);
+        $end = config_get('deploy_hour_end', 23);
+        $hour = date('H');
+        if($start <= $end){
+            if($hour < $start || $hour > $end){
+                echo '不在部署任务运行时间范围内'.PHP_EOL; return;
+            }
+        }else{
+            if($hour < $start && $hour > $end){
+                echo '不在部署任务运行时间范围内'.PHP_EOL; return;
+            }
+        }
+
+        $list = Db::name('cert_deploy')->field('id,status,issend')->whereRaw('status IN (0,-1) AND (retrytime IS NULL OR retrytime<NOW())')->select();
+        //print_r($list);exit;
+        $count = 0;
+        foreach ($list as $row) {
+            try {
+                $service = new CertDeployService($row['id']);
+                $service->process();
+                echo 'ID:'.$row['id'].' 部署任务执行成功！'.PHP_EOL;
+                if($row['issend'] == 0) MsgNotice::cert_deploy_send($row['id'], true);
+                $count++;
+            } catch (Exception $e) {
+                echo 'ID:'.$row['id'].' '.$e->getMessage().PHP_EOL;
+                if ($e->getCode() == 102) {
+                    break;
+                } elseif ($e->getCode() == 103) {
+                    if($row['issend'] == 0) MsgNotice::cert_deploy_send($row['id'], false);
+                } else {
+                    $count++;
+                }
+            }
+            if ($count >= 3) break;
+            sleep(1);
+        }
+    }
+}